Skip to content

Comments

Migration back to JS#2088

Closed
Chalarangelo wants to merge 37 commits intomasterfrom
memodb
Closed

Migration back to JS#2088
Chalarangelo wants to merge 37 commits intomasterfrom
memodb

Conversation

@Chalarangelo
Copy link
Owner

No description provided.

@github-actions github-actions bot added ci/cd Related to CI/CD issues (Netlify, GitHub Actions). development Related to development/developer experience web labels Aug 2, 2024
Comment on lines +25 to +28
return str
.replace(/<.*?>/g, '')
.replace(/&nbsp;/g, ' ')
.replace(/&amp;/g, '&')

Check failure

Code scanning / CodeQL

Double escaping or unescaping

This replacement may produce '&' characters that are double-unescaped [here](1).
Comment on lines +25 to +26
return str
.replace(/<.*?>/g, '')

Check failure

Code scanning / CodeQL

Incomplete multi-character sanitization

This string may still contain [<script](1), which may cause an HTML element injection vulnerability.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

ci/cd Related to CI/CD issues (Netlify, GitHub Actions). development Related to development/developer experience web

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant