search

hyperledger-cacti / cacti

Hyperledger Cacti is a new approach to the blockchain interoperability problem
https://wiki.hyperledger.org/display/cactus
Apache License 2.0
344 stars 286 forks source link

fix(security): prevent XSS in wallet deletion route #3600

Closed bhaskar-allam closed 2 weeks ago

bhaskar-allam commented 4 weeks ago

Replaced the string concatenation with a template literal (), which automatically escapes the interpolated values.This change ensures that the walletIdEsc value is properly escaped when inserted into the output string, preventing potential XSS attacks while maintaining the core functionality of the route handler.

petermetz commented 2 weeks ago

@bhaskar-allam Closing due to inactivity. Please feel free to re-open anytime in the future if you decide to come back to this.