redking / chosen-dojo

Dojo Port of Chosen (https://github.com/harvesthq/chosen)
http://vafada.github.com/chosen-dojo/
Other
4 stars 5 forks source link

Remove user input XSS vulnerabilities #6

Open teeohhem opened 4 years ago

teeohhem commented 4 years ago

This change removes the vulnerability of XSS attacks from user-supplied input. There are a few vulnerabilities that still exist IF default_text for no search results has html, but the user has no control over that (https://github.com/redking/chosen-dojo/pull/6/files#diff-a5fc2a42166e704a9759e64241075d2dR66)