gentics / mesh-ui

Gentics Mesh UI
https://getmesh.io
Apache License 2.0
23 stars 27 forks source link

SUP-13554: Remove all innerHTML calls #358

Closed deckdom closed 1 year ago

deckdom commented 1 year ago

In a lot of places bindings to the innerHTML were used, which can lead to XSS vulnurabilities. The entire highlight generation had to be rewritten to be properly/securely rendered via regular templates.