acl-services / paprika

🌶 A robust + accessible UI component library for React applications by Galvanize.
MIT License
54 stars 9 forks source link

fix(DataTable): TW-3363 Sanitize html rendered in DataTable VariableList #1284

Closed tristanjasper closed 1 year ago

tristanjasper commented 1 year ago

Purpose 🚀

Ticket: https://diligentbrands.atlassian.net/browse/TW-3363

There is a security issue with the DataTable component in that non sanitized data is rendered to the Dom via the VariableList subcomponent, row height calculations.

This pr sanitizes that html

Notes ✏️

details of code change / secondary purposes of this PR

Updates 📦

If you have changed a component's source code (not stories, specs, or docs), before merging your branch run yarn changeset. This will prompt you to:

Storybook 📕

http://storybooks.highbond-s3.com/paprika/tw-3363-sanitize-data-table-html

Screenshots 📸

optional but highly recommended

References 🔗

relevant Jira ticket / GitHub issues

changeset-bot[bot] commented 1 year ago

🦋 Changeset detected

Latest commit: cdfd0996bf9d6a2df57e303e994ffa1b16d5bb08

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package | Name | Type | | ------------------- | ----- | | @paprika/data-table | Minor |

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR