freeCodeCamp / demo-projects

Example certification projects for our programming curriculum
https://www.freecodecamp.org/learn
BSD 3-Clause "New" or "Revised" License
143 stars 90 forks source link

fix: Remove innerHTML sink in Palindrome Checker #627

Closed sylwia-budzynska closed 4 days ago

sylwia-budzynska commented 1 week ago

Checklist:

Closes #XXXXX

Please also see an email I sent to possible-security-issue at freecodecamp dot org.

Interpolating user input into innerHTML sink can lead to security issues.

This pull request changes the innerHTML sink to innerText in the Palindrome Checker project, which fixes the vulnerability.

This is my first contribution to freeCodeCamp, let me know if anything could be improved! I also wanted to extend my thanks to the freeCodeCamp team for creating such a great learning platform 🙌

raisedadead commented 4 days ago

:sparkles: :sparkles: AWESOME! :sparkles: :sparkles:

LGTM.

Thanks for this pull request and for contributing to the codebase for the first time. We will be looking forward to more contributions in the future.

Happy contributing.