search

Latina-Dev / latina-dev

Latina Dev is a directory of Latinas who code 💛️
https://latina.dev
MIT License
19 stars 7 forks source link

Fix code scanning alert no. 9: Stored cross-site scripting #188

Open FrancesCoronel opened 3 days ago

FrancesCoronel commented 3 days ago

Fixes https://github.com/Latina-Dev/latina-dev/security/code-scanning/9

To fix the problem, we need to sanitize the path property before using it in the Link component. This can be done by using a library like escape-html to ensure that any potentially malicious content is properly escaped.

  1. Install the escape-html library.
  2. Import the escape-html library in the components/MemberCard/MemberCard.tsx file.
  3. Use the escape-html function to sanitize the path property before using it in the Link component.

Suggested fixes powered by Copilot Autofix. Review carefully before merging.

vercel[bot] commented 3 days ago

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
latina-dev ❌ Failed (Inspect) Dec 1, 2024 6:11pm