kenwheeler / slick

the last carousel you'll ever need
kenwheeler.github.io/slick
MIT License
28.33k stars 5.88k forks source link

XSS security issues #4163

Open yslgn opened 2 years ago

yslgn commented 2 years ago

We have run Veracode security tests in our system and these tests identified XSS issues in the following lines of code in the module:

43 appendArrows: $(element), 44 appendDots: $(element), 139 _.$slider = $(element); 147 dataSettings = $(element).data('slick') || {};

We have strong opinion that these are false positive, however, we would appreciate if this could be confirmed, or otherwise, by authors/maintainers. Thanks.