opensource/mattermost
3
0
Fork 0
mirror of https://github.com/mattermost/mattermost.git synced 2026-09-24 16:05:00 +08:00
Code Issues Packages Projects Releases Wiki Activity

Suppress jQuery issue in Dependency-Check (#14396)

Browse Source
This commit is contained in:
Juho Nurminen
2020-04-29 10:38:19 +03:00
committed by GitHub
parent 68ff87708a
commit 6b99d68818
1 changed files with 7 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
dependency-suppression.xml
+7
View File
@@ -70,4 +70,11 @@
<packageUrl regex="true">^pkg:golang/golang\.org/x/tools@.*$</packageUrl>
<cpe>cpe:/a:data_tools_project:data_tools</cpe>
</suppress>
<suppress>
<notes><![CDATA[
jQuery HTML sanitization not used
]]></notes>
<packageUrl regex="true">^pkg:javascript/jquery@.*$</packageUrl>
<vulnerabilityName>Regex in its jQuery.htmlPrefilter sometimes may introduce XSS</vulnerabilityName>
</suppress>
</suppressions>