Closed kltm closed 3 years ago
It is currently possible to inject disrupting code into Gannet parameters that could be used to create an XSS attack for users on bad links. For example, the following URL illustrates this:
https://amigo-staging.geneontology.io/gannet?mirror=amigo_2_local_default&query=%3c%2ftextarea%3e%3cscRipt%3enetsparker(0x0067DA)%3c%2fscRipt%3e
Similar to https://github.com/geneontology/amigo/issues/575
Similarly: http://noctua-amigo.berkeleybop.org/gannet?query=%3C/textarea%3E%3Ca%20href=%22http://www.google.com%22%3E%3Ch1%3Eshould-not-be-seen%3C/h1%3E%3C/a
This looks to be cleared now.
New problematic example:
I think I got it.
It is currently possible to inject disrupting code into Gannet parameters that could be used to create an XSS attack for users on bad links. For example, the following URL illustrates this:
https://amigo-staging.geneontology.io/gannet?mirror=amigo_2_local_default&query=%3c%2ftextarea%3e%3cscRipt%3enetsparker(0x0067DA)%3c%2fscRipt%3eSimilar to https://github.com/geneontology/amigo/issues/575