Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

⚡ update the sanitizeHTML function #72

Merged
merged 1 commit into from
Sep 16, 2023

Conversation

colinwilson
Copy link
Owner

Changes

Update sanitizeHTML function in app.js. Previous version doesn’t properly encode strings for use as properties1.

Tests

  • Automated tests have been added

Documentation

  • This change does not need a documentation update

Dark mode

  • This PR does not change the UI

Footnotes

  1. How to sanitize third-party content with vanilla JS to prevent cross-site scripting (XSS) attacks

@colinwilson colinwilson added improvment Improve an existing feature security fix Fix a security vulnerability labels Sep 16, 2023
@colinwilson colinwilson self-assigned this Sep 16, 2023
@netlify
Copy link

netlify bot commented Sep 16, 2023

Deploy Preview for hugo-lotusdocs ready!

Name Link
🔨 Latest commit 9ceed38
🔍 Latest deploy log https://app.netlify.com/sites/hugo-lotusdocs/deploys/6505dc0ffb1b9f00080b91ff
😎 Deploy Preview https://deploy-preview-72--hugo-lotusdocs.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify site configuration.

@colinwilson colinwilson merged commit 62442d2 into release Sep 16, 2023
6 checks passed
@colinwilson colinwilson deleted the patch/sanitizehtml-function branch September 16, 2023 16:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
improvment Improve an existing feature security fix Fix a security vulnerability
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant