LizardByte / ThemerrDB

Movie and Video Game Theme Song Database.
https://app.lizardbyte.dev/ThemerrDB
58 stars 4 forks source link

fix(submission): prevent script injection #4460

Closed ReenigneArcher closed 3 months ago

ReenigneArcher commented 3 months ago

Description

Use env variable to prevent script injection. This should also solve the issue when a single quote was present in json data.

Screenshot

Issues Fixed or Closed

Type of Change

Checklist

Branch Updates

LizardByte requires that branches be up-to-date before merging. This means that after any PR is merged, this branch must be updated before it can be merged. You must also Allow edits from maintainers.

codecov[bot] commented 3 months ago

Codecov Report

All modified and coverable lines are covered by tests :white_check_mark:

Project coverage is 89.85%. Comparing base (b5f2afa) to head (a2c531b).

Additional details and impacted files ```diff @@ Coverage Diff @@ ## master #4460 +/- ## ======================================= Coverage 89.85% 89.85% ======================================= Files 1 1 Lines 345 345 ======================================= Hits 310 310 Misses 35 35 ```