adobe / leonardo

Generate colors based on a desired contrast ratio
http://www.leonardocolor.io
Apache License 2.0
1.97k stars 108 forks source link

fix: sanitized query strings on the website #240

Closed GarthDB closed 7 months ago

GarthDB commented 7 months ago

Description

added some basic sanitization for the query string to avoid some xss attacks

Motivation

Previously, this link would cause an alert to show up.

To-do list

changeset-bot[bot] commented 7 months ago

⚠️ No Changeset found

Latest commit: edec78b8ba765a5e46ddd1959d5994d1cf83fd95

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

GarthDB commented 7 months ago

Run report for edec78b8

Total time: 19.3s Comparison time: 17.8s Estimated loss: 1.5s (8.0% slower) Action Time Status Info
🟩 SyncWorkspace 0ms Passed
⬛️ SetupNodeTool(~20.11) 1.2s Skipped
🟩 InstallNodeDeps(~20.11) 7.5s Passed
🟩 SyncNodeProject(contrast-colors) 0.1ms Passed
🟩 SyncNodeProject(ui) 0.3ms Passed
🟩 RunTask(ui:makeDistDir) 34.9ms Passed
🟩 RunTask(ui:copyCNAME) 19.3ms Passed
🟩 RunTask(ui:copyUIIcons) 58.3ms Passed
🟩 RunTask(ui:copyWorkflowIcons) 49.3ms Passed
🟩 RunTask(ui:buildSite) 10.5s Passed
Touched files
``` docs/ui/package.json docs/ui/src/index.js docs/ui/src/js/addFromURL.js docs/ui/src/js/params.js docs/ui/src/js/utils.js docs/ui/src/theme.js pnpm-lock.yaml ```