Skip to main content

Tuleap 16 est là ! Assistez à l'événement virtuel le 17 octobre à 10h30. Inscrivez-vous ici !

Public

Project privacy set to public. By default, its content is available to everyone (authenticated or not). Please note that more restrictive permissions might exist on some items.

    •  
      request #17071 Update to DOMPurify 2.0.17
    Actions
    Infos
    #17071
    Thomas Gerbet (tgerbet)
    2020-09-21 16:17
    2020-09-21 09:49
    18403
    Details
    Update to DOMPurify 2.0.17
    A bypass allowing mXSS has been found.


    Changelog:
    https://github.com/cure53/DOMPurify/releases/tag/2.0.16
    https://github.com/cure53/DOMPurify/releases/tag/2.0.17
    Other
    Empty
    Empty
    • [ ] enhancement
    • [ ] internal improvement
    Empty
    Stage
    Thomas Gerbet (tgerbet)
    Closed
    2020-09-21
    Attachments
    Artifact links

    Releases

    Fixed in

    Artifact ID Project Tracker Summary Status Last Update Date Submitted By Assigned to
    rel #16163 Tuleap Releases 12.1 Delivered 2020-10-14 16:30 Manuel Vacelet (vaceletm)
    Empty
    References
    Referencing request #17071

    Git commit

    tuleap/tuleap/stable

    Merge commit 'refs/changes/35/20235/1' of ssh://gerrit.tuleap.net:29418/tuleap into HEAD ed3106082f
    User avatar Nicolas Terray (nterray) , 2020-09-21 12:26
    request #17071: Update to DOMPurify 2.0.17 7ce4df0911
    User avatar Thomas Gerbet (tgerbet) , 2020-09-21 09:57
    request #17071: Update to DOMPurify 2.0.17 89c20609ce
    User avatar Thomas Gerbet (tgerbet) , 2020-09-21 10:00
    request #17071: Update to DOMPurify 2.0.17 4fb1a2acb2
    User avatar Joris MASSON (jmasson) , 2020-09-21 15:58
    Referenced by request #17071

    Artifact Tracker v5

    rel #16163 12.1

    Other

    gerrit #20235
    gerrit #20236
    gerrit #20243
    Display settings

    Follow-ups