New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

security updates #411

Merged

opoudjis merged 1 commit into main from fix/security-updates202408

Aug 23, 2024

Contributor

opoudjis commented Aug 23, 2024

Metanorma PR checklist

Breaking changes (list related PRs)
Documentation update required (create task for this)
External dependency introduced (documentation update need)
Gem with native library introduced


          security updates

opoudjis self-assigned this

github-advanced-security bot found potential problems

View reviewed changes

lib/isodoc/ieee/presentation_xml_convert.rb

@@ @@ -35,7 +35,7 @@ @@
                     def subclause?(target, type, from)
                       (from&.match?(/\./) && type == "clause") ||
-                        target&.gsub(/<[^>]+>/, "")&.match(/^IEV$|^IEC 60050-/)
+                        target&.gsub(/<[^<>]+>/, "")&.match?(/^IEV$|^IEC 60050-/)

Check failure

Code scanning / CodeQL

Incomplete multi-character sanitization High

This string may still contain

<script

, which may cause an HTML element injection vulnerability.

opoudjis merged commit 030a9ef into main

17 of 19 checks passed

opoudjis deleted the fix/security-updates202408 branch

August 23, 2024 13:34

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet