Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Switch sanitization library #810

Merged
merged 7 commits into from
Jan 30, 2024
Merged

Switch sanitization library #810

merged 7 commits into from
Jan 30, 2024

Conversation

hernandoagf
Copy link
Collaborator

@hernandoagf hernandoagf commented Jan 8, 2024

  • Change the DOM sanitization approach to use DOMPurify instead of Angular v11's default sanitization method

Found this staging deployment. Seems to be using a different backend and it's a bit slow, but we can check the issue is not present there: http://159.203.86.45:8000

Malicious link (fixed) in this staging deployment:
http://159.203.86.45:8000/mips/list?search=%3Ciframe%3E%3Cnoembed%3Ex%0A%22%3E%3CSvg%20Only%3D1%20OnLoad%3Dconfirm(atob(%22WFNT%22))%3E

@hernandoagf hernandoagf merged commit 1f52d6f into main Jan 30, 2024
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants