Public

Project privacy set to public. By default, its content is available to everyone (authenticated or not). Please note that more restrictive permissions might exist on some items.

stable

Clone or download

Read-only

Merge commit 'refs/changes/23/28823/5' of ssh://gerrit.tuleap.net:29418/tuleap into HEAD

Download Browse

* ssh://gerrit.tuleap.net:29418/tuleap: Fixes request #32629: XSS in the card field of the agile dashboard apps Change-Id: Id7f9534f6d0aff029a9a527102b14f136ce72903

+340 −76
Joris MASSON (jmasson) 2023-06-22 12:55
Joris MASSON (jmasson) 2023-06-22 12:56
0c52f360b945d7aa214954c65b4e36b9aa308007
git #tuleap/stable/0c52f360b945d7aa214954c65b4e36b9aa308007

Modified Files

Side by side diff
Inline diff
Name
M plugins/agiledashboard/scripts/lib/card-fields/package.json +3 −4 Go to diff View file
M plugins/agiledashboard/scripts/lib/card-fields/pnpm-lock.yaml +9 −7 Go to diff View file
M plugins/agiledashboard/scripts/lib/card-fields/src/card-fields-service.js +64 −43 Go to diff View file
M plugins/agiledashboard/scripts/lib/card-fields/src/card-fields.tpl.html +1 −1 Go to diff View file
A plugins/agiledashboard/scripts/lib/card-fields/src/highlight-filter-template.test.ts +205 −0 Go to diff View file
A plugins/agiledashboard/scripts/lib/card-fields/src/highlight-filter-template.ts +46 −0 Go to diff View file
M plugins/agiledashboard/scripts/lib/card-fields/src/highlight-filter.js +9 −16 Go to diff View file
M plugins/agiledashboard/scripts/lib/card-fields/src/index.js +1 −2 Go to diff View file
M plugins/agiledashboard/scripts/lib/card-fields/vite.config.ts +2 −3 Go to diff View file