-
Notifications
You must be signed in to change notification settings - Fork 4
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[WIP] feat: webcomponent #60
Conversation
(feat) Repo with signed DAG-CBOR blocks
add a run command to run server, datasource ingest and repo sync in parallel. add some utitilites for long running tasks. also includes fix in rss datasource to retry failed requests.
feat: run command to run everything in parallel
chore: lint fix and fmt
* create dockerfile * add CI to publish images
@property() | ||
body = ''; | ||
override render() { | ||
return html`${unsafeHTML(this.body)}`; |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
this is .. unsafe ;) we likely need to check the HTML there. or only allow strings not html. we cannot inject any HTML coming from the repco node into the DOM, this opens it up to XSS etc vulnerabilities.
this is a bit of a bigger issue that we'll have to address in repco. for now, we should either sanitze the HTML here or convert it to string only (remove all html tags).
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
See #61
moved to oas |
a repco recomender box