search

NYCPlanning / labs-community-profiles

A site for exploring indicators, data, and information for NYC community districts
https://communityprofiles.planning.nyc.gov/
Other
52 stars 9 forks source link

Map hovers need refactoring to eliminate XSS attacks and warnings. #95

Open allthesignals opened 7 years ago

allthesignals commented 7 years ago

WARNING: Binding style attributes may introduce cross-site scripting vulnerabilities; please ensure that values being bound are properly escaped. For more information, including how to disable this warning, see http://emberjs.com/deprecations/v1.x/#toc_binding-style-attributes. Style affected: "pointer-events: none; position: absolute; top: 418px; left: 315px; z-index: 9999; width: 100px;"

These are caused by the map hover tooltips, in which style attributes are calculated dynamically.

jorgeh01 commented 7 years ago

@allthesignals check, please!