Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

fix #6976: XSS in New File dialog. #6977

Merged
merged 1 commit into from
Jan 28, 2020
Merged

fix #6976: XSS in New File dialog. #6977

merged 1 commit into from
Jan 28, 2020

Commits on Jan 28, 2020

  1. Fix XSS in New File dialog. 

    Commit replaces call to innerHTML with a call to innerText to ensure
user supplied text will not create elements in the DOM. An alternative
to this approach would be to sanitize user input before adding it to the
DOM.

Signed-off-by: Casey Flynn <caseyflynn@google.com>
    @caseyflynn-google
    caseyflynn-google committed Jan 28, 2020
    Configuration menu
    Copy the full SHA
    fe3c293 View commit details
    Browse the repository at this point in the history