Updated anchorURLs function in everything.js to prevent xss - Githubissues

zen-audio-player / zen-audio-player.github.io

Listen to YouTube videos, without the distracting visuals.

https://zen-audio-player.github.io/

MIT License

228 stars 180 forks source link

Updated anchorURLs function in everything.js to prevent xss #422

Closed ChandraShekharAgrawal closed 11 months ago

ChandraShekharAgrawal commented 11 months ago

Closes issue #420

Important

Mark with [x] to select. Leave as [ ] to unselect.

Motivation and Context

[ ] Why is this change required? What problem does it solve?
[ ] If it fixes an open issue, include the text Closes #1 (where 1 would be the issue number) to your commit message.

Types of changes

What types of changes does your code introduce? Check all the boxes that apply:

[x] Bug fix (non-breaking change which fixes an issue)
[ ] New feature (non-breaking change which adds functionality)
[ ] Breaking change (fix or feature that would cause existing functionality to change)

Description

[x] Updated function which was causing cross site scripting error

Final checklist:

Go over all the following points and check all the boxes that apply
If you're unsure about any of these, don't hesitate to ask. We're here to help!

[ ] My code follows the code style of this project.
[ ] My change requires a change to the documentation.
[ ] I have updated the documentation accordingly.
[x] I have read the CONTRIBUTING guidelines.
[x] All tests passed.