Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

export.js: remove jquery and convert to typescript #4267

Merged
merged 2 commits into from
Jan 16, 2023

Conversation

freyavs
Copy link
Contributor

@freyavs freyavs commented Dec 25, 2022

This pull request removes jquery from export.js, and converts it to typesciprt.

It is progress on #3590

@freyavs freyavs added the chore Repository/build/dependency maintenance label Dec 25, 2022
@freyavs freyavs self-assigned this Dec 25, 2022
@freyavs freyavs mentioned this pull request Dec 25, 2022
9 tasks
chooseOptionsPanel.classList.remove("hidden"); // this panel is initially hidden
chooseCollapse.hide();
chooseOptionsCollapse.show();
form.action = formUrl;

Check warning

Code scanning / CodeQL

DOM text reinterpreted as HTML

[DOM text](1) is reinterpreted as HTML without escaping meta-characters. [DOM text](2) is reinterpreted as HTML without escaping meta-characters.
@freyavs freyavs marked this pull request as ready for review January 12, 2023 15:09
@freyavs freyavs requested a review from a team as a code owner January 12, 2023 15:09
@freyavs freyavs requested review from bmesuere and niknetniko and removed request for a team January 12, 2023 15:09
@bmesuere bmesuere requested a review from jorg-vr January 13, 2023 14:47
Copy link
Member

@bmesuere bmesuere left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can we ignore the CodeQL warning?

@jorg-vr
Copy link
Contributor

jorg-vr commented Jan 16, 2023

Yes we can ignore it. We are using the value of an input field as a url parameter. Theoretically this could be an unsanitized uncontrolled parameter.

In our case the input field is a checkbox, and the value is always a numeric id set by our back-end. So I see no reason to sanitize this value

@jorg-vr jorg-vr merged commit 1f1c064 into develop Jan 16, 2023
@jorg-vr jorg-vr deleted the chore/export-jquery-removal branch January 16, 2023 08:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
chore Repository/build/dependency maintenance
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants