Skip to content

Conversation

@biw
Copy link
Owner

@biw biw commented Mar 17, 2021

Mitigates XSS on bad download URLs such as https://YOUR.NUTS.URL/download/version/2.0.0/%3Cimg%20src=x%20onerror=alert(1)%3E
and https://YOUR.NUTS.URL/download/channel/alpha/%3Cimg%20src=x%20onerror=alert(1)%3E

I don't see anywhere I could just insert a test for this in the existing suite.

From GitbookIO/nuts#138

@biw biw merged commit 2a7ae8a into main Mar 17, 2021
@biw biw deleted the flohdot/master branch March 17, 2021 03:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants