Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[#880] Escape admin felter, så evt. HTML koder ikke renderes #989

Merged
merged 2 commits into from
Jan 14, 2024

Conversation

rasmusselsmark
Copy link
Contributor

Relateret til #880

Escape felter i admin views, så evt. HTML koder ikke renderes, da dette kunne være et sikkerhedshul. Søgte efter alle sider hvor vi sætter link = '<a ...

Test med html koder og unicode:
image

Copy link

what-the-diff bot commented Jan 14, 2024

PR Summary

  • Enhanced Security Across Several Admin Files
    The team added a specific command ('import statement') to several program parts that manage activities, invitations, participants, departments, and more. This command would import a special security functionality that prevents harmful inputs from causing issues in these parts of the program.

  • Safe Display of Union Names
    To ensure safe interactions with the platform, the team made sure that the display of union names, within different sectors like activities, invites, and others, is done securely. This means that any potentially hazardous input in these fields is neutralized, providing a safer environment for users.

  • Secured Activity and Participant Names
    Similar measures are put in place for displaying names related to activities and the participants involved in those activities. The system will now handle this securely, thus enhancing user safety.

  • Added Safety Measures for Personal and Email Information
    Finally, the team has worked on ensuring even personal information like an individual's name and their family's email is displayed securely. As such, users can trust the system to responsibly handle their data while displaying it in various sections.

@lakridserne lakridserne merged commit ba4ba30 into master Jan 14, 2024
5 checks passed
@lakridserne lakridserne deleted the 880-admin-html-escape branch January 14, 2024 12:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

[BUG]Admin views: Links i cell values håndterer ikke HTML korrekt
2 participants