harden: add output encoding in form-requests.vue - #1925

Open
anupamme wants to merge 1 commit into
ProcessMaker:developfrom
anupamme:fix-repo-screen-builder-xss-event-handler-sanitization
Open

harden: add output encoding in form-requests.vue#1925
anupamme wants to merge 1 commit into
ProcessMaker:developfrom
anupamme:fix-repo-screen-builder-xss-event-handler-sanitization

fix: V-001 security vulnerability

e0ba452
Select commit
Loading
Failed to load commit list.
GitGuardian / GitGuardian Security Checks succeeded Aug 3, 2026 in 32s

No secrets detected ✅

1 commit was scanned without uncovering any secrets.

Details

Commit scanned: 1

  • Pull request #1925: fix-repo-screen-builder-xss-event-handler-sanitization 👉 develop

🦉 GitGuardian detects secrets in your source code to help developers and security teams secure the modern development process. You are seeing this because you or someone else with access to this repository has authorized GitGuardian to scan your pull request.

View more details on GitGuardian
, 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Remove or un-stick sticky/fixed headers that block content\n(function() {\n function unstick() {\n document.querySelectorAll('header, nav, [role=\"banner\"], .header, .navbar, .sticky, .fixed-top, [style*=\"position: fixed\"], [style*=\"position:sticky\"]').forEach(function(el) {\n if (el.style.position === 'fixed' || el.style.position === 'sticky' || \n getComputedStyle(el).position === 'fixed' || getComputedStyle(el).position === 'sticky') {\n el.style.position = 'static';\n el.style.top = 'auto';\n el.style.zIndex = 'auto';\n }\n });\n }\n \n unstick();\n \n var observer = new MutationObserver(unstick);\n observer.observe(document.body, { childList: true, subtree: true, attributes: true, attributeFilter: ['style', 'class'] });\n})();", "Kill Sticky Headers"); } } catch(__e) { console.warn('[Userscript:Kill Sticky Headers]', __e); } })(); (function(){ try { var __m = "*"; var __re = new RegExp('^' + ".*" + '
Skip to content

harden: add output encoding in form-requests.vue - #1925

Open
anupamme wants to merge 1 commit into
ProcessMaker:developfrom
anupamme:fix-repo-screen-builder-xss-event-handler-sanitization
Open

harden: add output encoding in form-requests.vue#1925
anupamme wants to merge 1 commit into
ProcessMaker:developfrom
anupamme:fix-repo-screen-builder-xss-event-handler-sanitization

fix: V-001 security vulnerability

e0ba452
Select commit
Loading
Failed to load commit list.
GitGuardian / GitGuardian Security Checks succeeded Aug 3, 2026 in 32s

No secrets detected ✅

1 commit was scanned without uncovering any secrets.

Details

Commit scanned: 1

  • Pull request #1925: fix-repo-screen-builder-xss-event-handler-sanitization 👉 develop

🦉 GitGuardian detects secrets in your source code to help developers and security teams secure the modern development process. You are seeing this because you or someone else with access to this repository has authorized GitGuardian to scan your pull request.

View more details on GitGuardian
, 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Universal Dark Mode - works on any site\n(function() {\n var enabled = true;\n \n function applyDarkMode() {\n if (!enabled) return;\n \n // Create style element if it doesn't exist\n var style = document.getElementById('universal-dark-mode-style');\n if (!style) {\n style = document.createElement('style');\n style.id = 'universal-dark-mode-style';\n document.head.appendChild(style);\n }\n \n // Dark mode CSS - inverts colors but preserves images/video\n style.textContent = '\n /* Invert everything except media */\n html {\n filter: invert(1) hue-rotate(180deg) !important;\n background: #1a1a2e !important;\n }\n \n /* Restore images, videos, iframes, canvas */\n img, video, iframe, canvas, svg, picture, [style*=\"background-image\"] {\n filter: invert(1) hue-rotate(180deg) !important;\n }\n \n /* Preserve specific elements that should not be inverted */\n .no-dark-mode, .no-dark-mode *,\n [data-theme=\"light\"], [data-theme=\"light\"],\n .ace_editor, .ace_editor *,\n .CodeMirror, .CodeMirror *,\n .monaco-editor, .monaco-editor *,\n .markdown-body pre, .markdown-body pre *,\n .highlight, .highlight *,\n pre code, pre code * {\n filter: none !important;\n }\n \n /* Fix common UI elements */\n .modal, .popup, .dropdown-menu, .tooltip, .popover {\n filter: invert(1) hue-rotate(180deg) !important;\n background: #2d2d44 !important;\n border-color: #444 !important;\n }\n \n /* Scrollbars */\n ::-webkit-scrollbar { background: #1a1a2e !important; }\n ::-webkit-scrollbar-thumb { background: #444 !important; }\n ::-webkit-scrollbar-thumb:hover { background: #555 !important; }\n \n /* Selection */\n ::selection { background: #4ecdc4 !important; color: #1a1a2e !important; }\n ::-moz-selection { background: #4ecdc4 !important; color: #1a1a2e !important; }\n ';\n }\n \n function removeDarkMode() {\n var style = document.getElementById('universal-dark-mode-style');\n if (style) style.remove();\n }\n \n // Toggle with Alt+Shift+D\n document.addEventListener('keydown', function(e) {\n if (e.altKey && e.shiftKey && e.key === 'D') {\n e.preventDefault();\n enabled = !enabled;\n if (enabled) {\n applyDarkMode();\n console.log('[Universal Dark Mode] Enabled');\n } else {\n removeDarkMode();\n console.log('[Universal Dark Mode] Disabled');\n }\n }\n });\n \n // Apply on load\n applyDarkMode();\n \n // Re-apply on dynamic content\n var observer = new MutationObserver(function(mutations) {\n if (enabled && !document.getElementById('universal-dark-mode-style')) {\n applyDarkMode();\n }\n });\n observer.observe(document.head, { childList: true });\n \n console.log('[Universal Dark Mode] Loaded - Press Alt+Shift+D to toggle');\n})();", "Universal Dark Mode"); } } catch(__e) { console.warn('[Userscript:Universal Dark Mode]', __e); } })(); })();
Skip to content

harden: add output encoding in form-requests.vue - #1925

Open
anupamme wants to merge 1 commit into
ProcessMaker:developfrom
anupamme:fix-repo-screen-builder-xss-event-handler-sanitization
Open

harden: add output encoding in form-requests.vue#1925
anupamme wants to merge 1 commit into
ProcessMaker:developfrom
anupamme:fix-repo-screen-builder-xss-event-handler-sanitization

fix: V-001 security vulnerability

e0ba452
Select commit
Loading
Failed to load commit list.
GitGuardian / GitGuardian Security Checks succeeded Aug 3, 2026 in 32s

No secrets detected ✅

1 commit was scanned without uncovering any secrets.

Details

Commit scanned: 1

  • Pull request #1925: fix-repo-screen-builder-xss-event-handler-sanitization 👉 develop

🦉 GitGuardian detects secrets in your source code to help developers and security teams secure the modern development process. You are seeing this because you or someone else with access to this repository has authorized GitGuardian to scan your pull request.

View more details on GitGuardian