CSInterface.js DOM text reinterpreted as HTML

google / AEUX

Editable After Effects layers from Sketch artboards

Apache License 2.0

502 stars 55 forks source link

CSInterface.js DOM text reinterpreted as HTML #212

Open Shivam7-1 opened 2 months ago

Shivam7-1 commented 2 months ago

By using innerText, it will avoid the risk of HTML injection, as these properties automatically escape any HTML special characters in the provided text. This helps prevent cross-site scripting (XSS) vulnerabilities by treating the input as plain text rather than interpreted HTML. Always be cautious when dealing with user input or dynamic content to prevent security risks.

Shivam7-1 commented 2 months ago

Hi @adamplouff Could You Please Review this PR Thanks

Shivam7-1 commented 2 months ago

Hi @adamplouff Could You Please Review this PR Thanks

Shivam7-1 commented 2 months ago

Hi @adamplouff Could You Please Review this PR Thanks

Shivam7-1 commented 2 months ago

Hi @adamplouff Could You Please Review this PR Thanks

Shivam7-1 commented 2 months ago

Hi @adamplouff Could You Please Review this PR Thanks

Shivam7-1 commented 2 months ago

Hi @adamplouff Is there Anything Else is Required From My Side To get This PR merge Thanks

Shivam7-1 commented 2 months ago

Hi @adamplouff Could You Please Review this PR Thanks

Shivam7-1 commented 1 month ago

Hi @adamplouff Could You Please Review this PR Thanks