Skip to content

Conversation

@vas3a
Copy link
Collaborator

@vas3a vas3a commented Nov 25, 2025

Related JIRA Ticket:

https://topcoder.atlassian.net/browse/

What's in this PR?


<p className={styles.modelDescription}>
{props.model.description}
<MarkdownReview value={props.model.description} />

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[❗❗ security]
Ensure that props.model.description is sanitized before rendering with MarkdownReview to prevent potential XSS vulnerabilities. If MarkdownReview handles sanitization internally, this can be ignored.

</div>
<p className={styles.workflowDescription}>
{workflow.description}
<MarkdownReview value={workflow.description} />

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[❗❗ security]
Ensure that workflow.description is properly sanitized before being passed to MarkdownReview to prevent potential XSS vulnerabilities if description contains user-generated content.

@vas3a vas3a merged commit 6f77e6c into dev Nov 25, 2025
8 checks passed
@vas3a vas3a deleted the PM-3072_markdown-for-aiworkflow-desc branch November 25, 2025 14:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants