HumanSignal / label-studio-frontend

Data labeling react app that is backend agnostic and can be embedded into your applications — distributed as an NPM package
https://labelstud.io/
Apache License 2.0
421 stars 316 forks source link

fix: LEAP-381: Remove excess regexp from BEM module #1648

Closed hlomzik closed 10 months ago

hlomzik commented 11 months ago

It's not used in LSF anyway. And the fix is pretty simple and straightforward.

PR fulfills these requirements

Describe the reason for change

To fix regexp injection vulnerability https://github.com/HumanSignal/label-studio-frontend/security/code-scanning/9

This change affects (describe how if yes)

Does this PR introduce a breaking change?

What level of testing was included in the change?

codecov-commenter commented 11 months ago

Codecov Report

All modified and coverable lines are covered by tests :white_check_mark:

Comparison is base (88ba15c) 68.27% compared to head (fcd0cae) 68.28%.

Additional details and impacted files ```diff @@ Coverage Diff @@ ## master #1648 +/- ## ======================================= Coverage 68.27% 68.28% ======================================= Files 443 443 Lines 28690 28690 Branches 7633 7630 -3 ======================================= + Hits 19589 19591 +2 + Misses 7849 7847 -2 Partials 1252 1252 ```

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.

hlomzik commented 10 months ago

/git merge master

Workflow run Successfully pushed new changes: Merge remote-tracking branch 'origin/master' into fb-leap-381/css-prefix (e9010cfb40f4df376de258c4bf87da9abe884596)