search

EmicoEcommerce / Magento2Tweakwise-archived

Magento 2 module for Tweakwise integration
Other
9 stars 25 forks source link

Disable Reflected XSS on de slider confguration #225

Closed JeroenBoersma closed 2 years ago

JeroenBoersma commented 2 years ago

The Slider configuration contains the current url, which could be escaped adding a single quote '.

This way it was possible to add reflected XSS in the URL For obvious reasons I will not add the URL's used here.

Hnto commented 2 years ago

@JeroenBoersma Thanks for your PR. I've merged it and will be releasing a new version in time.