New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Remove use of string-strip-html #836

Merged

lastzero merged 1 commit into photoprism:develop from benmccann:string-strip-html

Jan 7, 2021

Contributor

benmccann commented Jan 6, 2021 •

edited

Closes #826.

This removes a dozen npm packages from the frontend bundle by using our own encodeHTML function as suggested in the OWASP cheat sheet.


          Remove use of string-strip-html

ca97399

CLAassistant commented Jan 6, 2021 •

edited

All committers have signed the CLA.

lastzero added the waiting label

Member

lastzero commented Jan 7, 2021

Merging this now. Guess you're sure there is no risk of introducing security issues? 🧐

lastzero added released and removed waiting labels

lastzero merged commit 58e12c8 into photoprism:develop

2 checks passed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment