◐ Shell
reader mode source ↗
Skip to content

Security fix for possible Cross-site-scripting (XSS) attack #4353

New issue
New issue
Closed
#4355
Labels
kind/bugpriority/p2wontfixThis will not be worked on
@shuchu

Description

@shuchu
shuchu
opened on Jul 15, 2024

Reference :
https://sonarcloud.io/project/security_hotspots?id=shuchu_feast&hotspots=AY9leJjfaz5TZ8maDgoc
https://sonarcloud.io/project/security_hotspots?id=shuchu_feast&hotspots=AY9leJk3az5TZ8maDgo8

Specifications

  • Version:
  • Platform:
  • Subsystem:

Possible Solution

Set the autoescape=True in Jinjia2 Environment()

Metadata

Metadata

Assignees

No one assigned

    Labels

    kind/bugpriority/p2wontfixThis will not be worked on

    Type

    No type

    Fields

    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions