app-decorators

app-decorators copied to clipboard

SerkanSipahi

SerkanSipahi

SerkanSipahi

SerkanSipahi

SerkanSipahi

SerkanSipahi

load.js proposal required for outfile (see below) ```js let load = async (...args, modules) => { let modules = await Promise.all([...args].map(module => System.import(module))); Object.assign(modules, _modules); } export { load, }...

SerkanSipahi

security issues

4

It looks https://github.com/SerkanSipahi/app-decorators/blob/master/src/libs/stylesheet.js#L481 is vulnerable to Cross Site Scripting (XSS) as the href link is not HTML attribute-value encoded. It looks https://github.com/SerkanSipahi/app-decorators/blob/master/src/helpers/queryString.js#L96 is vulnerable to URL injection as the values...

spaceone

##### es2015 code in production - https://philipwalton.com/articles/deploying-es2015-code-in-production-today/ - prerequirements -- update to babel v7 -- update nodejs to >= 8

SerkanSipahi

use babel-preset-env in build system

1

SerkanSipahi