这是indexloc提供的服务,不要输入任何密码
Skip to content

🔒 Add script tag validation to satisfy SNYK-JS-TSUP-9056218 #1314

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

benhoad
Copy link

@benhoad benhoad commented Mar 6, 2025

Applied suggested fix from https://gist.github.com/jackfromeast/36f98bf7542d11835c883c1d175d9b92

Current test suite passes; investigating extended test to specifically target the CVE scenario.

Copy link

codesandbox bot commented Mar 6, 2025

Review or Edit in CodeSandbox

Open the branch in Web EditorVS CodeInsiders

Open Preview

Copy link

vercel bot commented Mar 6, 2025

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
tsup ✅ Ready (Inspect) Visit Preview 💬 Add feedback May 28, 2025 2:43am

@kishorchouhan
Copy link

When can we expect it to be merged?

@benhoad benhoad force-pushed the test-patch-SNYK-JS-TSUP-9056218 branch from 57ab6f2 to 9414332 Compare May 28, 2025 02:43
@benhoad benhoad changed the title Add script tag validation to satisfy SNYK-JS-TSUP-9056218 🔒 Add script tag validation to satisfy SNYK-JS-TSUP-9056218 May 28, 2025
@shadabfaisal7
Copy link

@benhoad when is this getting merged?

@benhoad
Copy link
Author

benhoad commented Jun 4, 2025

@shadabfaisal7 @kishorchouhan It's awaiting review by @egoist

@kishorchouhan
Copy link

@egoist Can you please review this to solve the long due vuln on priority?
Screenshot 2025-06-16 at 3 01 08 PM

@charIeszhao
Copy link

@egoist Hello, could you please take a look at this? Thanks

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants