Skip to content

fix: enhancement of isExternal - #2093

Merged
sy-records merged 2 commits into
developfrom
isExternal
Jun 18, 2023
Merged

fix: enhancement of isExternal#2093
sy-records merged 2 commits into
developfrom
isExternal

Conversation

@sy-records

@sy-recordssy-records commented Jun 16, 2023

Copy link
Copy Markdown
Member

Summary

Fix an xss vulnerability that was fed via email.

Fix#1477 (comment)

What kind of change does this PR introduce?

For any code change,

  • Related documentation has been updated if needed
  • Related tests have been updated or tests have been added

Does this PR introduce a breaking change? (check one)

  • Yes
  • No

If yes, please describe the impact and migration path for existing applications:

Related issue, if any:

Tested in the following browsers:

  • Chrome
  • Firefox
  • Safari
  • Edge
  • IE

@vercel

vercelBot commented Jun 16, 2023

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for Git ↗︎

NameStatusPreviewCommentsUpdated (UTC)
docsify-preview✅ Ready (Inspect)Visit Preview💬 Add feedbackJun 17, 2023 0:23am

@sy-records
sy-records requested a review from a teamJune 16, 2023 07:08
@codesandbox-ci

codesandbox-ciBot commented Jun 16, 2023

Copy link
Copy Markdown

This pull request is automatically built and testable in CodeSandbox.

To see build info of the built libraries, click here or the icon next to each commit SHA.

Latest deployment of this branch, based on commit 942a162:

SandboxSource
docsify-templateConfiguration

@Koooooo-7

Copy link
Copy Markdown
Member

Could u plz add a test case on this for good understanding of this changes ?

Koooooo-7
Koooooo-7 previously approved these changes Jun 16, 2023
@Koooooo-7

Copy link
Copy Markdown
Member

I checked the mail and yes that we need check the \ , is it harmful either when it contains more than 2 \\ ?

@sy-recordssy-records mentioned this pull request Jun 16, 2023
@sy-records

Copy link
Copy Markdown
MemberAuthor

One and more are problematic, so matching to one is OK.

@sy-records
sy-records merged commit 7f13ba0 into developJun 18, 2023
@sy-records
sy-records deleted the isExternal branch June 18, 2023 03:51
sy-records added a commit that referenced this pull request Jun 24, 2023
@sy-recordssy-records mentioned this pull request Jun 24, 2023
@sy-recordssy-records mentioned this pull request May 5, 2025
@sy-recordssy-records mentioned this pull request Jul 17, 2026
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Security Vulnerability

2 participants

@sy-records@Koooooo-7