Andreas/wekan
1
0
Fork 0
mirror of https://github.com/wekan/wekan.git synced 2025-12-27 12:48:49 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Try to fix some security issues.

Browse source 
Thanks to responsible security disclosure contributors and xet7 !
This commit is contained in:
Lauri Ojansivu 2023-02-20 01:21:33 +02:00
parent b349ecbdf7
commit ff993e7c91
9 changed files with 4272 additions and 2291 deletions
Download patch file Download diff file Expand all files Collapse all files

2
client/components/main/editor.js
View file

@ -283,7 +283,7 @@ BlazeComponent.extendComponent({
}
}).register('editor');
import DOMPurify from 'dompurify';
import DOMPurify from 'isomorphic-dompurify';
// Additional safeAttrValue function to allow for other specific protocols
// See https://github.com/leizongmin/js-xss/issues/52#issuecomment-241354114