🐿️🌵 ↝ [SSG-173]: Uploads & Earth Events #180
Conversation
… new table for life entities
…the pokedex classification
…ts to biome types
…tor, continued works on Mars aggregation
…fixing biome/weather/trait aggregation return in biome aggregation
…us sunspot slider integrated into mission flow
…r aggregation passed
Gizmotronn
added
bug
|
Gizmotronn
left a comment
Gizmotronn
left a comment
There was a problem hiding this comment.
Bridging from #179 ...let's get to work on planning the next sprint now.
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
…M text reinterpreted as HTML Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
| }} | ||
| /> | ||
| ) : preview ? ( | ||
| <img src={preview ? preview : "/placeholder.svg"} alt="Preview" className="w-full h-full object-cover" /> |
Check warning
Code scanning / CodeQL
DOM text reinterpreted as HTML Medium test
Show autofix suggestion
Hide autofix suggestion
Copilot Autofix
AI 11 months ago
To fix the problem, we need to ensure that the preview variable is properly validated before being used in the src attribute of the img tag. We can achieve this by checking that the preview variable is a valid blob URL. This will prevent any malicious input from being interpreted as HTML or JavaScript.
- Validate the
previewvariable to ensure it is a valid blob URL. - Update the code to include this validation before setting the
srcattribute of theimgtag.
| @@ -247,4 +247,4 @@ | ||
| /> | ||
| ) : preview ? ( | ||
| <img src={preview ? preview : "/placeholder.svg"} alt="Preview" className="w-full h-full object-cover" /> | ||
| ) : preview && preview.startsWith("blob:") ? ( | ||
| <img src={preview} alt="Preview" className="w-full h-full object-cover" /> | ||
| ) : ( |
1 participant
Timer...begun with the classification count
Earth uploads - working - [ SSC-31 ]
Trait mapping
New projects (CoM:Shapes, Sunspots overhauled)