Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix/email format #40

Merged
merged 8 commits into from
Sep 2, 2024
Merged

Fix/email format #40

merged 8 commits into from
Sep 2, 2024

Conversation

BarbaraOliveira13
Copy link
Contributor

@BarbaraOliveira13 BarbaraOliveira13 commented Aug 30, 2024

🎩 Description
On the signup form, a user can create an XSS injection through the email field.

📌 Related Issues
Notion card

Testing

FRONT

  1. Access the signup form.
  2. Fill in the fields, and for the email field, enter
  • "<script>alert('Jakick')</script>"@gmail.com or
  • "<script>alert('XSS')</script>"@example.org or
  • an email with ' " > or >.
  1. Submit the form.
  2. Verify that there is no JavaScript alert window and that the form submission is prevented.

@BarbaraOliveira13 BarbaraOliveira13 marked this pull request as ready for review August 30, 2024 14:23
@luciegrau luciegrau requested review from AyakorK and removed request for Quentinchampenois September 2, 2024 07:26
Copy link

@Stef-Rousset Stef-Rousset left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Works as expected !!

@luciegrau luciegrau merged commit 860d750 into main Sep 2, 2024
7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants