remix-run / history

Manage session history with JavaScript
MIT License
8.29k stars 961 forks source link

window.location SAST vulnerability #973

Open swetha8612 opened 2 months ago

swetha8612 commented 2 months ago

As part of our company's security policy, we run all our application through fortify scan. Fortify scan raised a flag where window.location has been used in this package. We are using version 4.10.1 but I noticed it is in latest version too. It is complaining that data need to be validated.

Could you please have a look and suggest. Thank you.