gravitee-io / gravitee-ui-components

🧱 Set of UI components used across the Gravitee.io ecosystem.
https://components.gravitee.io
Apache License 2.0
18 stars 12 forks source link

Sanitize Asciidoc content to avoid XSS attacks #657

Closed gaetanmaisse closed 1 year ago

gaetanmaisse commented 1 year ago

Issue

https://gravitee.atlassian.net/browse/APIM-2011

Description

Sanitize Asciidoc content to avoid XSS attacks

To test: Go to the dedicated story organisms > gv-documentation > sanitized-malicious-doc -> Tada no more Alert displayed by the browser


📚  View the storybook of this branch here

graviteeio commented 1 year ago

Hey dear reviewer, I'm the Gravitee.io bot :robot:

I just want to tell you that package.json has been updated in this PR.

Some components are based on third party libraries, for integration into a web component, we extract the css from its libraries as assets.

WARNING: When highlight.js or github-markdown-css are updated, we must run yarn build task to update the css.

Generated by :no_entry_sign: dangerJS against 6f798fec3a165d83d5e2c35294d45d2c389c3ba2

graviteeio commented 1 year ago

Gravitee.io Automatic Deployment

A beta version of this package has been published! 🚀

To use it in your project run the following lines:

npm install @gravitee/ui-components@3.41.0-apim-2011-sanitize-asciidoc-4004b2a

or

yarn add @gravitee/ui-components@3.41.0-apim-2011-sanitize-asciidoc-4004b2a
gaetanmaisse commented 1 year ago

-> New story: https://5ffff84833d7150021078521-drhmxskkrh.chromatic.com/?path=/story/organisms-gv-documentation--sanitized-malicious-doc

sonarcloud[bot] commented 1 year ago

Kudos, SonarCloud Quality Gate passed!    Quality Gate passed

Bug A 0 Bugs
Vulnerability A 0 Vulnerabilities
Security Hotspot A 0 Security Hotspots
Code Smell A 0 Code Smells

No Coverage information No Coverage information
0.0% 0.0% Duplication

graviteeio commented 1 year ago

Gravitee.io Automatic Deployment

A beta version of this package has been published! 🚀

To use it in your project run the following lines:

npm install @gravitee/ui-components@3.41.0-apim-2011-sanitize-asciidoc-6f798fe

or

yarn add @gravitee/ui-components@3.41.0-apim-2011-sanitize-asciidoc-6f798fe
graviteeio commented 1 year ago

:tada: This PR is included in version 3.41.1 :tada:

The release is available on:

Your semantic-release bot :package::rocket: