search

yawik / SimpleImport

Simple Job Import Module. Imports job openings into YAWIK
MIT License
0 stars 1 forks source link

link and applyLink are not filtered correctly #18

Open mbo-s opened 5 years ago

mbo-s commented 5 years ago

The values for link and applyLink are not filtered correctly similiar to https://github.com/cross-solution/YAWIK/issues/514 I think there should only be URLs possible like https://www.example.com/offer and not something like javascript:alert('xss'); so the fix provided in the issue above would not solve this

TiSiE commented 4 years ago

That is more a prolem of validating, not filtering.