Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Sanitize html props with xss vulnerability. #2732

Merged
merged 14 commits into from
Jan 30, 2024
Merged

Sanitize html props with xss vulnerability. #2732

merged 14 commits into from
Jan 30, 2024

Conversation

T4rk1n
Copy link
Contributor

@T4rk1n T4rk1n commented Jan 24, 2024

  • Sanitize html props that are vulnerable to xss vulnerability if user data is inserted. Fix Validate url to prevent XSS attacks #2729
    • dcc.Link.href
    • html.A.href
    • html.Iframe.src
    • html.ObjectEl.data
    • html.Embed.src
    • html.Button.formAction
    • html.Form.action
  • Add special key _dash_error to setProps, allowing component developers to send error without throwing in render. Usage props.setProps({_dash_error: new Error("custom error")})

@T4rk1n T4rk1n requested a review from alexcjohnson as a code owner January 24, 2024 15:52
Copy link
Collaborator

@alexcjohnson alexcjohnson left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💃 Very nice. Love the test!

# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Validate url to prevent XSS attacks
2 participants