search

digipolisantwerp / location-picker_widget_angular

Antwerp UI Location Picker Widget UI (Angular)
Other
2 stars 6 forks source link

bugfix/EscapeMaliciousCharactersFromInput #128

Closed DarkFelcore closed 1 month ago

DarkFelcore commented 1 month ago

This PR is used to escape and prevent malicious characters to be send though the search field to the backend. This is a fix as a result of a pentest.

Characters that are being escaped: image

More information can be found on: https://jira.antwerpen.be/browse/GIS-881

TriangleJuice commented 1 month ago

Discussed internally and the outcome is that we want the sanitizing be done in the backend.