Skip to content

Preserve HTML in breadcrumb labels. Fixes an XSS issue where otherwi…#2

Open
xurble wants to merge 1 commit intothecreation:masterfrom
zoo-digital:zoo-fixes
Open

Preserve HTML in breadcrumb labels. Fixes an XSS issue where otherwi…#2
xurble wants to merge 1 commit intothecreation:masterfrom
zoo-digital:zoo-fixes

Conversation

@xurble
Copy link

@xurble xurble commented May 20, 2021

Pull Request

Fixes #1

Changes proposed:

Changes the construction of the dropdown menu to insert the .html() of the source nodes not the .text()

…e escaped tags are reinserted as raw HTML.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

XSS Issue - HTML escaping not preserved when building dropdown version of breadcrumbs.

1 participant