Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Adding Gemini, file structure #44

Merged
merged 1 commit into from
Mar 9, 2024
Merged

Conversation

appatalks
Copy link
Owner

No description provided.


var bubble = document.createElement("div");
bubble.className = "bubble user-bubble";
bubble.innerHTML = message;

Check warning

Code scanning / CodeQL

DOM text reinterpreted as HTML Medium

DOM text
is reinterpreted as HTML without escaping meta-characters.

var sQuestion = document.getElementById("txtMsg").innerHTML;
sQuestion = sQuestion.replace(/<br>/g, "\n");
const cleanedQuestion = sQuestion.replace(/<[^>]+>/g, "");

Check failure

Code scanning / CodeQL

Incomplete multi-character sanitization High

This string may still contain
<script
, which may cause an HTML element injection vulnerability.
@appatalks
Copy link
Owner Author

take note of codeql results

@appatalks appatalks merged commit da629a0 into main Mar 9, 2024
2 of 3 checks passed
@appatalks appatalks deleted the appatalks_eva_playground branch March 10, 2024 05:56
appatalks added a commit that referenced this pull request Mar 10, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant