Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[WIP] feat: webcomponent #60

Closed
wants to merge 194 commits into from
Closed

Conversation

nemi-notrace
Copy link
Contributor

a repco recomender box

packages/repco-webcomponent/.eslintrc.json Outdated Show resolved Hide resolved
packages/repco-webcomponent/.prettierrc.json Outdated Show resolved Hide resolved
packages/repco-webcomponent/package.json Outdated Show resolved Hide resolved
packages/repco-webcomponent/tsconfig.json Show resolved Hide resolved
package.json Outdated Show resolved Hide resolved
@property()
body = '';
override render() {
return html`${unsafeHTML(this.body)}`;
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

this is .. unsafe ;) we likely need to check the HTML there. or only allow strings not html. we cannot inject any HTML coming from the repco node into the DOM, this opens it up to XSS etc vulnerabilities.

this is a bit of a bigger issue that we'll have to address in repco. for now, we should either sanitze the HTML here or convert it to string only (remove all html tags).

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

See #61

@nemi-notrace nemi-notrace mentioned this pull request Feb 4, 2023
@nemi-notrace nemi-notrace changed the base branch from main to repo February 5, 2023 12:18
@nemi-notrace
Copy link
Contributor Author

moved to oas

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants