search

eligrey / FileSaver.js

An HTML5 saveAs() FileSaver implementation
https://eligrey.com/blog/saving-generated-files-on-the-client-side/
Other
21.42k stars 4.38k forks source link

Veracode issue in the version 2.0.5 #753

Closed anujmayank closed 2 years ago

anujmayank commented 2 years ago

Here is the veracode issue :

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Description: This call contains a cross-site scripting (XSS) flaw. The application populates the HTTP response with untrusted input, allowing an attacker to embed malicious content, such as Javascript code, which will be executed in the context of the victim's browser. XSS vulnerabilities are commonly exploited to steal or manipulate cookies, modify presentation of content, and compromise confidential information, with new attack vectors being discovered on a regular basis.

How can we fix this one, to pass Veracode scan

anujmayank commented 2 years ago

issue got resolved after minifying