Skip to main content

Tuleap 16 est là ! Assistez à l'événement virtuel le 17 octobre à 10h30. Inscrivez-vous ici !

Public

Project privacy set to public. By default, its content is available to everyone (authenticated or not). Please note that more restrictive permissions might exist on some items.

    •  
      request #18476 Update to DOMPurify 2.2.6
    Actions
    Infos
    #18476
    Thomas Gerbet (tgerbet)
    2020-12-21 15:13
    2020-12-21 13:31
    20025
    Details
    Update to DOMPurify 2.2.6
    DOMPurify 2.2.6 comes with a new hardening to defend against mXSS.

    Changelog: https://github.com/cure53/DOMPurify/releases/tag/2.2.6
    PR introducing the new mechanism: https://github.com/cure53/DOMPurify/pull/495
    Other
    Empty
    Empty
    • [ ] enhancement
    • [ ] internal improvement
    Empty
    Stage
    Thomas Gerbet (tgerbet)
    Closed
    2020-12-21
    Attachments
    Artifact links

    Releases

    Fixed in

    Artifact ID Project Tracker Summary Status Last Update Date Submitted By Assigned to
    rel #16654 Tuleap Releases 12.4 Delivered 2021-01-06 15:45 Manuel Vacelet (vaceletm)
    Empty
    References
    Referencing request #18476

    Git commit

    tuleap/tuleap/stable

    Merge commit 'refs/changes/40/21140/1' of ssh://gerrit.tuleap.net:29418/tuleap into HEAD a715f91dd8
    User avatar Yannis ROSSETTO (rossettoy) , 2020-12-21 15:11
    request #18476 Update to DOMPurify 2.2.6 1d0d9df256
    User avatar Thomas Gerbet (tgerbet) , 2020-12-21 13:35
    request #18476: Update to DOMPurify 2.2.6 65c5e9d2c0
    User avatar Thomas Gerbet (tgerbet) , 2020-12-21 13:37
    request #18476: Update to DOMPurify 2.2.6 0636eee9aa
    User avatar Thomas Gerbet (tgerbet) , 2020-12-21 13:40
    Referenced by request #18476

    Artifact Tracker v5

    rel #16654 12.4

    Other

    gerrit #21140
    gerrit #21141
    gerrit #21142
    Display settings

    Follow-ups