search

GSA / smartpay-training

Prototype for new GSA SmartPay training quizzes
8 stars 4 forks source link

Dependabot Alert: Vite's `server.fs.deny` is bypassed when using `?import&raw` #651

Open JennaySDavis opened 1 month ago

JennaySDavis commented 1 month ago

The contents of arbitrary files can be returned to the browser.

JennaySDavis commented 5 days ago

651 Acceptance Criteria

Pass/Fail Description
Pass Full Regression Testing of Training Website

Comments/Additional Notes N/A

ADA Compliance (Automated scan via Chrome Lighthouse)

Criteria Score
Performance 100
Accessibility 100
Best Practices 100

Passed 10/16/2024 - JSD

johnbeallgsa commented 4 days ago

Thanks for explaining in the demo. I am moving to Done.