Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Fix to prevent XSS, throw an error when the URL contains a JS script #2464

Merged
merged 6 commits into from Oct 16, 2019
Merged

Fix to prevent XSS, throw an error when the URL contains a JS script #2464

merged 6 commits into from Oct 16, 2019

Commits on Oct 14, 2019

  1. Fixes issue where XSS scripts attacks were possible via the URL

    @yasuf
    yasuf committed Oct 14, 2019
    Copy the full SHA
    51effa1 View commit details
    Browse the repository at this point in the history

  2. Fix error

    @yasuf
    yasuf committed Oct 14, 2019
    Copy the full SHA
    0a31f1c View commit details
    Browse the repository at this point in the history

  3. Move throwing error up

    @yasuf
    yasuf committed Oct 14, 2019
    Copy the full SHA
    e767278 View commit details
    Browse the repository at this point in the history

Commits on Oct 15, 2019

  1. Add specs and make regex cover more xss cases

    @yasuf
    yasuf committed Oct 15, 2019
    Copy the full SHA
    3ce13ff View commit details
    Browse the repository at this point in the history

Commits on Oct 16, 2019

  1. Merge branch 'master' into xss-fix

    @felipewmartins
    felipewmartins committed Oct 16, 2019
    Copy the full SHA
    716b1cf View commit details
    Browse the repository at this point in the history

  2. Merge branch 'master' into xss-fix

    @yasuf
    yasuf committed Oct 16, 2019
    Copy the full SHA
    8ab6ad8 View commit details
    Browse the repository at this point in the history