Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Feature/user setting #25

Closed
wants to merge 99 commits into from
Closed

Feature/user setting #25

wants to merge 99 commits into from

Conversation

winverse
Copy link
Collaborator

  • 설정 페이지 마이그레이션

@@ -1,8 +1,13 @@
import katexWhitelist from '@/lib/katexWhiteList'
import sanitize from 'sanitize-html'

function sanitizeEventScript(htmlString: string) {
return htmlString.replace(/ on\w+="[^"]*"/g, '')

Check failure

Code scanning / CodeQL

Incomplete multi-character sanitization High

This string may still contain
on
, which may cause an HTML attribute injection vulnerability.
@winverse winverse requested a review from velopert January 28, 2024 22:28
@winverse winverse self-assigned this Jan 28, 2024
@winverse winverse closed this Feb 1, 2024
@winverse winverse deleted the feature/user-setting branch February 23, 2024 02:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant