Andreas/wekan
1
0
Fork 0
mirror of https://github.com/wekan/wekan.git synced 2026-02-04 07:31:47 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions 5

Try to fix some security issues. Part 2.

Browse source 
Thanks to responsible security disclosure contributors and xet7 !
This commit is contained in:
Lauri Ojansivu 2023-02-20 16:48:02 -05:00
parent e34cfad06b
commit 382168a5b4
9 changed files with 2198 additions and 3712 deletions
Download patch file Download diff file Expand all files Collapse all files

2
client/components/activities/activities.js
View file

@ -1,4 +1,4 @@
import DOMPurify from 'isomorphic-dompurify';
import DOMPurify from 'dompurify';
import { TAPi18n } from '/imports/i18n';
const activitiesPerPage = 500;

2
client/components/cards/attachments.js
View file

@ -1,5 +1,5 @@
import { ObjectID } from 'bson';
import DOMPurify from 'isomorphic-dompurify';
import DOMPurify from 'dompurify';
const filesize = require('filesize');
const prettyMilliseconds = require('pretty-ms');

2
client/components/main/editor.js
View file

@ -283,7 +283,7 @@ BlazeComponent.extendComponent({
}
}).register('editor');
import DOMPurify from 'isomorphic-dompurify';
import DOMPurify from 'dompurify';
// Additional safeAttrValue function to allow for other specific protocols
// See https://github.com/leizongmin/js-xss/issues/52#issuecomment-241354114