Skip to content

Conversation

@HoonBaek
Copy link
Contributor

@HoonBaek HoonBaek commented Jan 5, 2023

For Internal Contributors

UIKIT-2807

Description Of Changes

  • Sanitize that special characters of HTML tags cause XSS issue
  • Create a util function to encode a string to HTML
  • Apply the encoding function when filling the message input value with text

Types Of Changes

What types of changes does your code introduce to this project?
Put an x in the boxes that apply_

  • Bugfix
  • New feature
  • Documentation (correction or otherwise)
  • Cosmetics (whitespace, appearance (ex) Prettier)
  • Build configuration
  • Improvement (refactor code)

@HoonBaek HoonBaek requested a review from sravan-s January 5, 2023 23:57
@HoonBaek HoonBaek self-assigned this Jan 5, 2023
@HoonBaek HoonBaek merged commit 4018692 into main Jan 6, 2023
@HoonBaek HoonBaek deleted the fix/UIKIT-2807/Message-input-XSS branch January 6, 2023 05:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants