Skip to content
This repository has been archived by the owner on Dec 14, 2023. It is now read-only.

Fix usage of files/dirs with script based names #989

Open
mattpass opened this issue Jul 25, 2021 · 0 comments
Open

Fix usage of files/dirs with script based names #989

mattpass opened this issue Jul 25, 2021 · 0 comments

Comments

@mattpass
Copy link
Collaborator

Describe the bug
Create a file with name that's potentially XSS, eg <script>alert(1)<Xscript> - can open and save it fine, but in some places it's used (eg last 10 files, tab name, multiple results etc) it has problems displaying.

To Reproduce
Steps to reproduce the behavior:

  1. Create a file called <script>alert(1)<Xscript> with any content and save
  2. Reload ICEcoder to see error
  3. It will also error in other places.

Expected behavior
Handle it just as per any other file.

Additional context
It may not be executable JS, but the first part is still parsed, so needs resolving.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

No branches or pull requests

1 participant