HomeSoftware Heritage
Diffusion Web applications ccfc15753561

swh-web: Fix numerous XSS vulnerabilities
ccfc15753561
Actions

Description

swh-web: Fix numerous XSS vulnerabilities

Fix XSS vulnerabilities in origin-search table, various error pages and API HTML interface.

Closes T1699

Escape unsafe objects in Error Page

top-navigation: Fix XSS in branch name

Fix XSS in API HTML interface

Details

Provenance
kalpitkAuthored on May 7 2019, 7:22 PM
kalpitkPushed on May 7 2019, 8:52 PM
Differential Revision
D1442: swh-web: Fix XSS
Parents
rDWAPPSd9d9e67d2c90: assets/webapp.css: Fix footer link colors when mouse hovers
Branches
Unknown
Tags
Unknown
Tasks
T1699: XSS in swh-web
Build Status
Buildable 5638
Build 7697: test-and-build

Changes (7)

PathSize
swh/
web/
api/
assets/
src/
bundles/
browse/
browse/
views/
utils/
common/
templates/
includes/

rDWAPPSccfc15753561

View Options

swh/web/api/apiresponse.py

Loading...
View Options

swh/web/assets/src/bundles/browse/origin-search.js

Loading...
View Options

swh/web/browse/utils.py

Loading...
View Options

swh/web/browse/views/utils/snapshot_context.py

Loading...
View Options

swh/web/common/exc.py

Loading...
View Options

swh/web/common/origin_save.py

Loading...
View Options

swh/web/templates/includes/top-navigation.html

Loading...
About · Developer information · Legal