[GH-ISSUE #302] BUG: Code scanning has found issues in Userview.JS #154

New issue

Closed

opened 2026-03-02 12:04:20 +03:00 by kerem · 1 comment

kerem commented

2026-03-02 12:04:20 +03:00

Owner

Originally created by @KelvinTegelaar on GitHub (Nov 26, 2021).
Original GitHub issue: https://github.com/KelvinTegelaar/CIPP/issues/302

Originally assigned to: @lwhitelock on GitHub.

Codescanning has found issues in Userview.js:

Directly writing user input (for example, a URL query parameter) to a webpage without properly sanitizing the input first, allows for a cross-site scripting vulnerability.

List of issues:

js/UserView.js:60
js/UserView.js:65
js/UserView.js:170
js/UserView.js:220

Originally created by @KelvinTegelaar on GitHub (Nov 26, 2021). Original GitHub issue: https://github.com/KelvinTegelaar/CIPP/issues/302 Originally assigned to: @lwhitelock on GitHub. Codescanning has found issues in Userview.js: Directly writing user input (for example, a URL query parameter) to a webpage without properly sanitizing the input first, allows for a cross-site scripting vulnerability. List of issues: js/UserView.js:60 js/UserView.js:65 js/UserView.js:170 js/UserView.js:220

kerem

2026-03-02 12:04:20 +03:00

closed this issue
added the
bug

security
labels

kerem commented

2026-03-02 12:04:21 +03:00

Author

Owner

@lwhitelock commented on GitHub (Nov 26, 2021):

I'll do this one

@lwhitelock commented on GitHub (Nov 26, 2021): I'll do this one

kerem referenced this issue

2026-03-02 13:55:04 +03:00

[PR #154] [CLOSED] Update Security.md #2702

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

starred/CIPP#154

No description provided.

Rows
Columns