Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 2 additions & 1 deletion ej2-javascript-toc.html
Original file line number Diff line number Diff line change
Expand Up @@ -76,7 +76,7 @@
<li><a href="/ej2-javascript/common/how-to/localization-using-ajax">Load locale files using Ajax</a></li>
<li><a href="/ej2-javascript/common/how-to/localization-with-locale">Load culture files</a></li>
<li><a href="/ej2-javascript/common/how-to/csp-errors">Content Security Policy Errors</a></li>
<li><a href="/ej2-typescript/common/how-to/instance">Get Control Instance</a></li>
<li><a href="/ej2-javascript/common/how-to/instance">Get Control Instance</a></li>
</ul>
</li>
</ul>
Expand Down Expand Up @@ -976,6 +976,7 @@
<li><a href="/ej2-javascript/document-editor/global-local">Globalization</a></li>
<li><a href="/ej2-javascript/document-editor/notes">Footnotes and Endnotes</a></li>
<li><a href="/ej2-javascript/document-editor/view">View</a></li>
<li><a href="/ej2-javascript/document-editor/security-advisories">Security Advisories</a></li>
<li>How To
<ul>
<li><a href="/ej2-javascript/document-editor/how-to/add-save-button-in-toolbar">Add save button in toolbar</a></li>
Expand Down
46 changes: 46 additions & 0 deletions ej2-javascript/document-editor/security-advisories.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,46 @@
---
layout: post
title: Security Advisories in ##Platform_Name## Document editor control | Syncfusion
description: Learn here all about Security Advisories in Syncfusion ##Platform_Name## Document editor control of Syncfusion Essential JS 2 and more.
platform: ej2-javascript
control: Security advisories
publishingplatform: ##Platform_Name##
documentation: ug
domainurl: ##DomainURL##
---

# Security Advisories in Syncfusion EJ2 Controls

Syncfusion places the utmost priority on the security of our controls. Users can rest assured about the security of our controls, as we have implemented all necessary measures to mitigate security vulnerabilities such as cross-site scripting and insecure dependencies. To meet security standards, Syncfusion utilizes the [ESLint](https://eslint.org/) and [ESLint plugin security](https://github.com/eslint-community/eslint-plugin-security#rules) tools for static code analysis. Additionally, Syncfusion packages undergo software composition analysis using the [SOOS](https://soos.io/) security tool.

This document provides a description of the security updates available for Syncfusion Essential JS2 controls for volume release.

## Security Updates

The following security updates are available for Syncfusion DocumentEditor control and are listed based on the release version.

### 2024 Volume 2 (v26.2.4) - July 25, 2024

This release resolves critical and moderate security vulnerabilities affecting the Syncfusion Document Editor Docker Image.

**Threat:**

* ASP.NET Core Components: Multiple moderate vulnerabilities in Kestrel’s HTTP request handling could expose applications to access control issues and data leakage.

* Npgsql: A potential SQL injection vulnerability via Protocol Message Size Overflow was detected.

* Dynamic LINQ: Vulnerable to remote code execution via untrusted input manipulation.

**Resolution:**

* Updated affected ASP.NET Core packages.

* The Npgsql package and Dynamic LINQ have been removed, as they are no longer required, to enhance security and mitigate the risk of SQL injection attacks.

## Common Security Updates

For details on common security updates related to Syncfusion products, please refer to [this link](https://ej2.syncfusion.com/documentation/security-advisories). This resource provides information on the latest advisories and best practices to help ensure the security and integrity of your applications.

## Security Issue

If users discover any security issues or need assistance in resolving them with Syncfusion controls, please contact us by creating a support ticket on [our support site](https://syncfusion.com/support) or by posting your query on Stack Overflow with the tag `syncfusion-ej2`.
1 change: 1 addition & 0 deletions ej2-typescript-toc.html
Original file line number Diff line number Diff line change
Expand Up @@ -977,6 +977,7 @@
<li><a href="/ej2-typescript/document-editor/global-local">Globalization</a></li>
<li><a href="/ej2-typescript/document-editor/notes">Footnotes and Endnotes</a></li>
<li><a href="/ej2-typescript/document-editor/view">View</a></li>
<li><a href="/ej2-typescript/document-editor/security-advisories">Security Advisories</a></li>
<li>How To
<ul>
<li><a href="/ej2-typescript/document-editor/how-to/add-save-button-in-toolbar">Add save button in toolbar</a></li>
Expand Down