AEUX icon indicating copy to clipboard operation
AEUX copied to clipboard

Published 20 hours ago • verified publisher icon google

AlgoliaSearchBox.vueDOM text reinterpreted as HTML

Open Shivam7-1 opened this issue 1 year ago • 3 comments

By using innerText, it will avoid the risk of HTML injection, as these properties automatically escape any HTML special characters in the provided text. This helps prevent cross-site scripting (XSS) vulnerabilities by treating the input as plain text rather than interpreted HTML. Always be cautious when dealing with user input or dynamic content to prevent security risks.

Shivam7-1 avatar Apr 14 '24 06:04 Shivam7-1

Hi @adamplouff Could You Please Review this PR Thanks

Shivam7-1 avatar Apr 14 '24 06:04 Shivam7-1

Hi @adamplouff Could You Please Review this PR Thanks

Shivam7-1 avatar Apr 19 '24 16:04 Shivam7-1

This PR will break this product by printing raw HTML on the user's screen.

NeilFraser avatar Apr 19 '24 18:04 NeilFraser