Skip to content

Commit 782397b

Browse files
committed
Fixed security issue in tour
1 parent 38ad92d commit 782397b

File tree

2 files changed

+4
-1
lines changed

2 files changed

+4
-1
lines changed

app/helpers/VersionHelper.ts

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ class VersionHelper {
55
//region Fields
66

77
private static _target : string = 'http://yimello.adriencadet.com/version';
8-
private static _version : string = '0.1.1';
8+
private static _version : string = '0.1.2';
99

1010
//endregion Fields
1111

app/presenters/TourPresenter.ts

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -123,6 +123,9 @@ class TourPresenter extends YimelloPresenter {
123123
return;
124124
}
125125

126+
// Avoid harmful values
127+
value = SecurityHelper.disarm(value);
128+
126129
// Start to build a new tag
127130
tag =
128131
DOMElement.fromString('<li><p>' + value + '</p></li>');

0 commit comments

Comments
 (0)