Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Security: Add Self XSS Warning to Dev Console #15

Closed
hoverduck opened this issue Nov 17, 2015 · 2 comments · Fixed by #18088
Closed

Security: Add Self XSS Warning to Dev Console #15

hoverduck opened this issue Nov 17, 2015 · 2 comments · Fixed by #18088
Assignees
@kloon
Labels
Good First Issue Small, contained issues. Security [Type] Enhancement

Comments

@hoverduck
Copy link
Contributor

Add a warning in the Javascript console similar to this example from www.facebook.com
image
@lancewillett lancewillett added the Good First Issue Small, contained issues. label Oct 14, 2016
@erickstm87
Copy link

Hey I'd like to take this one. It would be my first post. Not too familiar with xss attacks though. Is there a specific portion of the site where this warning would be needed?

@chrispwns
Copy link

Is this still open? This seems like a relatively easy fix and I'd love to have a chance at it. Assuming it's open would something like the attached image work for you? I went ahead and threw that together really quick just to see how console formatting worked in JS because it interested me.
self-xss-warning

@tfroseman tfroseman mentioned this issue Feb 27, 2017
Closed
@gziolo gziolo removed this from TODO in GM 2017 - Good First Change Sep 14, 2017
@kloon kloon self-assigned this Sep 15, 2017
@kloon kloon mentioned this issue Sep 15, 2017
Merged
@allendav allendav mentioned this issue Feb 1, 2018
Merged
sirreal pushed a commit that referenced this issue Dec 5, 2018
@ockham @sirreal
Drop react-a11y rules (#15)
763f732 
Consumers can use upstream's `plugin:jsx-a11y/recommended` ruleset instead.
sirreal pushed a commit that referenced this issue Dec 5, 2018
@ockham @sirreal
Drop react-a11y rules (#15)
cbbcf71 
Consumers can use upstream's `plugin:jsx-a11y/recommended` ruleset instead.
sirreal pushed a commit that referenced this issue Dec 6, 2018
@Tug @sirreal
Merge pull request #15 from Automattic/add/php-template-literal-test
18eb3a1 
Add PHP template literal test
sirreal pushed a commit that referenced this issue Dec 6, 2018
@ockham @sirreal
Drop react-a11y rules (#15)
60b2873 
Consumers can use upstream's `plugin:jsx-a11y/recommended` ruleset instead.
sirreal pushed a commit that referenced this issue Dec 7, 2018
@Tug @sirreal
Merge pull request #15 from Automattic/add/php-template-literal-test
eb64a2e 
Add PHP template literal test
sirreal pushed a commit that referenced this issue Dec 7, 2018
@Tug @sirreal
Merge pull request #15 from Automattic/add/php-template-literal-test
160aca2 
Add PHP template literal test
sirreal pushed a commit that referenced this issue Dec 11, 2018
@Tug @sirreal
Merge pull request #15 from Automattic/add/php-template-literal-test
7609971 
Add PHP template literal test
sirreal pushed a commit that referenced this issue Dec 11, 2018
@ockham @sirreal
Drop react-a11y rules (#15)
e0417e7 
Consumers can use upstream's `plugin:jsx-a11y/recommended` ruleset instead.
sirreal pushed a commit that referenced this issue Dec 11, 2018
@Tug @sirreal
Merge pull request #15 from Automattic/add/php-template-literal-test
9406d12 
Add PHP template literal test
jsnajdr pushed a commit that referenced this issue Jan 27, 2020
@retrofox @jsnajdr
Merge pull request #15 from Automattic/add/pluggable-req
9a9237e 
[WIP] Add pluggable "request" interface for interacting with the REST API
sgomes pushed a commit that referenced this issue Jan 29, 2020
@skeltoac @sgomes
Merge pull request #15 from Automattic/fix/#5
e06230a 
Fix TypeError on string body 'error' from rest-proxy
sgomes pushed a commit that referenced this issue Feb 18, 2020
@skeltoac @sgomes
Merge pull request #15 from Automattic/fix/#5
c9f5461 
Fix TypeError on string body 'error' from rest-proxy
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@kloon kloon

Labels
Good First Issue Small, contained issues. Security [Type] Enhancement
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Console log message to prevent self xss Automattic/wp-calypso
7 participants
@lancewillett @kloon @gziolo @hoverduck @erickstm87 @chrispwns @matticbot