Skip to content
This repository has been archived by the owner on Sep 10, 2020. It is now read-only.

Avoid any XSS issue while displaying the package description in the search results #65

Merged
merged 1 commit into from
Aug 21, 2015

Conversation

redox
Copy link
Contributor

@redox redox commented Aug 21, 2015

This fixes cdnjs/cdnjs#5462 escaping the description before displaying it. We keep the <em></em> tags to highlight the matching words.

screen shot 2015-08-21 at 09 36 37

PeterDaveHello added a commit that referenced this pull request Aug 21, 2015
Avoid any XSS issue while displaying the package description in the search results
@PeterDaveHello PeterDaveHello merged commit 519cc2e into master Aug 21, 2015
@PeterDaveHello
Copy link
Contributor

👍

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

[Security flaw] HTML injection on dynamic list (search)
2 participants