department-of-veterans-affairs / diffusion-marketplace

Diffusion Marketplace source code
https://marketplace.va.gov
7 stars 10 forks source link

dm-4881 dom text reinterpret / xss codeql warning 3 #1133

Open PhilipDeFraties opened 1 week ago

PhilipDeFraties commented 1 week ago

JIRA issue link

https://agile6.atlassian.net/browse/DM-4881

Description - what does this code do?

updates innovation show page js function setMoreLessHTML to properly escape potentially harmful chars to prevent xss vulnerability

Testing done - how did you test it/steps on how can another person can test it

On an innovation show page leave a long comment, verify that once persisted the comment text properly paginates with the "See more" / "See less" buttons.

Screenshots, Gifs, Videos from application (if applicable)

Link to mock-ups/mock ups (image file if you have it) (if applicable)

Acceptance criteria

Definition of done