Production Release

Sprint 44 Issues: December 2024 Separation Report - Remove User #702 Static Code Vulnerability: js/incomplete-URL-substring-sanitization #698
GSA · Dec 5, 2024 · 374211b · 374211b
1 parent 76d497b
commit 374211b
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 3 deletions.
diff --git a/requirements.txt b/requirements.txt
@@ -10,4 +10,4 @@ alembic==1.10.2
 PyMuPDF==1.21.1
 pydantic-settings==2.0.2
 email-validator==2.0.0.post2
-python-multipart==0.0.7
+python-multipart==0.0.18
diff --git a/training-front-end/src/plugins/uswds_links.js b/training-front-end/src/plugins/uswds_links.js
@@ -18,8 +18,11 @@ export function processLinksPlugin() {
           // these will all be local, so ignore
           return
         }
-
-        if (!(domain.hostname === 'gsa.gov' || domain.hostname === 'www.gsa.gov'|| domain.protocol === 'mailto:')) {
+        const internalHost = [
+          'gsa.gov',
+          'www.gsa.gov'
+        ]
+        if (!(internalHost.includes(domain.hostname) || domain.protocol === 'mailto:')) {
           properties.className += ' usa-link--external'
         }