Closed kunwarsaluja closed 1 month ago
@thedoc31 I understand a couple of them where these flagged issues make sense like MWPW-154289, MWPW-154285, MWPW-154285 but other flagged issues which are suspected of an XSS, are these false positives ? The markup is coming from the franklin content bus or content source which in this case is sharepoint and no user input is introduced in any of these.
I did try fix a few them with https://github.com/adobecom/firefly/pull/101 (still testing) but wanted your opinion on this
Checked and all issues except a couple XSS issues are open but are false positives as the sharepoint is a trusted source for providing content so ill mark all these as closed
[1] : https://dashboard.kodiak.corp.adobe.com/#/findings/github.com/adobecom/firefly
From @thedoc31