Sign Up
Log In
Log In
or
Sign Up
Places
All Projects
Status Monitor
Collapse sidebar
home:Alexander_Naumov:SLE-12:Update
rubygem-rails-html-sanitizer.12047
0001_CVE-2018-3741-xss_vulnerability.patch
Overview
Repositories
Revisions
Requests
Users
Attributes
Meta
File 0001_CVE-2018-3741-xss_vulnerability.patch of Package rubygem-rails-html-sanitizer.12047
--- rails-html-sanitizer-1.0.3/lib/rails/html/scrubbers.rb.old 2019-08-02 11:21:18.413347885 +0200 +++ rails-html-sanitizer-1.0.3/lib/rails/html/scrubbers.rb 2019-08-02 11:21:48.785346493 +0200 @@ -152,6 +152,8 @@ end node.remove_attribute(attr_node.name) if attr_name == 'src' && attr_node.value !~ /[^[:space:]]/ + + Loofah::HTML5::Scrub.force_correct_attribute_escaping! node end end
Locations
Projects
Search
Status Monitor
Help
OpenBuildService.org
Documentation
API Documentation
Code of Conduct
Contact
Support
@OBShq
Terms
openSUSE Build Service is sponsored by
The Open Build Service is an
openSUSE project
.
Sign Up
Log In
Places
Places
All Projects
Status Monitor
