disco icon indicating copy to clipboard operation
disco copied to clipboard

Remove html injections

Open Nacho114 opened this issue 2 years ago • 0 comments

Currently in the tasks.json, the description is html code, so when we load it we are then injecting it into the vue template. It is bad practice to inject html code, especially since we will allow users to create tasks (and add information), this could be exploited.

The injection happens in line 24 in TaskList.vue:

 <span v-html="task.displayInformation.summary"></span>

Once this is done we can remove the corresponding error that is being muted in the .eslintrc.json (something about no-v-html).

Nacho114 avatar Mar 31 '22 14:03 Nacho114