Skip to main content

Public

Project privacy set to public. By default, its content is available to everyone (authenticated or not). Please note that more restrictive permissions might exist on some items.

    •  
      request #13966 Update to DOMPurify 2.0.4
    Actions
    Infos
    #13966
    Thomas Gerbet (tgerbet)
    2019-10-08 09:59
    2019-10-07 15:51
    15182
    Details
    Update to DOMPurify 2.0.4
    Yet another mXSS variation has been found. Let's upgrade.


    Follow up to request #13897, request #13920 and request #13936.
    Other
    All
    Empty
    • [ ] enhancement
    • [ ] internal improvement
    Empty
    Stage
    Thomas Gerbet (tgerbet)
    Closed
    2019-10-08
    Attachments
    Artifact links

    Releases

    Fixed in

    Artifact ID Project Tracker Summary Status Last Update Date Submitted By Assigned to
    rel #13800 Tuleap Releases 11.7 Delivered 2019-10-17 15:09 Manuel Vacelet (vaceletm)
    Empty
    References
    Referencing request #13966

    Artifact Tracker v5

    request #13967 Update to DOMPurify 2.0.5

    Git commit

    tuleap/tuleap/stable

    Merge commit 'refs/changes/83/16383/1' of ssh://gerrit.tuleap.net:29418/tuleap into HEAD bae281a43d
    User avatar Yannis ROSSETTO (rossettoy) , 2019-10-08 09:57
    request #13966: Update to DOMPurify 2.0.4 1e41b176b7
    User avatar Thomas Gerbet (tgerbet) , 2019-10-07 15:59
    request #13966: Update to DOMPurify 2.0.4 b817455895
    User avatar Thomas Gerbet (tgerbet) , 2019-10-07 16:03
    request #13966: Update to DOMPurify 2.0.4 a46c47ffbf
    User avatar Thomas Gerbet (tgerbet) , 2019-10-07 16:01
    Display settings

    Follow-ups