mirror of
https://github.com/go-gitea/gitea.git
synced 2025-07-21 09:31:19 +02:00
Improve HTML escaping helper (#12383)
The previous method did not escape single quotes which under some circumstances can lead to XSS vulnerabilites and the fact that it depends on jQuery is also not ideal. Replace it with a lightweight module. Co-authored-by: techknowlogick <techknowlogick@gitea.io>
This commit is contained in:
@@ -18,6 +18,7 @@
|
||||
"css-loader": "4.0.0",
|
||||
"cssnano-webpack-plugin": "1.0.3",
|
||||
"dropzone": "5.7.2",
|
||||
"escape-goat": "3.0.0",
|
||||
"fast-glob": "3.2.4",
|
||||
"file-loader": "6.0.0",
|
||||
"fomantic-ui": "2.8.6",
|
||||
|
Reference in New Issue
Block a user