fix: remove github url to prevent xss rendering

newrelic / nr1-github

NR1 Github allows you to create more context to your entities by having access to the GitHub repository, contributors and README.

https://github.com/newrelic/nr1-github/discussions

Apache License 2.0

19 stars 27 forks source link

fix: remove github url to prevent xss rendering #70

Closed moonlight-komorebi closed 3 years ago

moonlight-komorebi commented 3 years ago

rather than render the url we get back (which can be set with vulnerable text), instead render generic message.

Resolves: #69

CLAassistant commented 3 years ago

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}

nr-opensource-bot commented 3 years ago

:tada: This PR is included in version 0.6.9 :tada:

The release is available on GitHub release

Your semantic-release bot :package::rocket:

moonlight-komorebi commented 3 years ago

the user will now see this: Screen Shot 2021-05-17 at 9 05 04 AM

which no longer references the potentially suspect content.