Skip to content

πŸ”§v1.1.8 Release#39

Merged
axtonprice merged 6 commits intomainfrom
dev
Jun 22, 2022
Merged

πŸ”§v1.1.8 Release#39
axtonprice merged 6 commits intomainfrom
dev

Conversation

@axtonprice
Copy link
Copy Markdown
Member

No description provided.

@axtonprice axtonprice added bug Something isn't working documentation Improvements or additions to documentation enhancement New feature or request πŸ”’ security Security improvements or updates CSS Cascading Stylesheet Language PHP Hypertext Preprocessor Language labels Jun 22, 2022
@axtonprice axtonprice self-assigned this Jun 22, 2022
document.getElementById("submissiontextbox").value = `${window.location}view?key=${data.response}`; // Set text box to view message URL
document.getElementById("submissiontextbox").innerHTML = `${window.location}view?key=${data.response}`; // Set text box to view message URL
log(`Server responsed with ${data.response}`);
document.getElementById("submissiontextbox").value = `${window.location}view?key=${data.response}`; log(`Updated 'submissiontextbox.value'`); // Set text box to view message URL

Check failure

Code scanning / SnykCode

Cross-site Scripting (XSS)

Unsanitized input from data from a remote resource flows into innerHTML, where it is used to dynamically construct the HTML page on client side. This may result in a DOM Based Cross-Site Scripting attack (DOMXSS).
@axtonprice axtonprice merged commit 661e9ea into main Jun 22, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

bug Something isn't working CSS Cascading Stylesheet Language documentation Improvements or additions to documentation enhancement New feature or request PHP Hypertext Preprocessor Language πŸ”’ security Security improvements or updates

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants