[GH-ISSUE #115] sweetalert injection #96

Closed
opened 2026-02-26 21:34:24 +03:00 by kerem · 2 comments
Owner

Originally created by @TristisOris on GitHub (Apr 8, 2025).
Original GitHub issue: https://github.com/eduardolat/pgbackweb/issues/115

This plugin inject a 3rd party code since this commit https://www.reddit.com/r/javascript/comments/yv293z/sweetalert2_this_commit_adds_what_could_be_almost/
https://github.com/advisories/GHSA-qq6h-5g6j-q3cm

Originally created by @TristisOris on GitHub (Apr 8, 2025). Original GitHub issue: https://github.com/eduardolat/pgbackweb/issues/115 This plugin inject a 3rd party code since this commit https://www.reddit.com/r/javascript/comments/yv293z/sweetalert2_this_commit_adds_what_could_be_almost/ https://github.com/advisories/GHSA-qq6h-5g6j-q3cm
kerem 2026-02-26 21:34:24 +03:00
Author
Owner

@eduardolat commented on GitHub (Apr 8, 2025):

Wow, that looks bad, I'm going to remove it and manually create other custom modal implementation, thanks for the report

<!-- gh-comment-id:2786772246 --> @eduardolat commented on GitHub (Apr 8, 2025): Wow, that looks bad, I'm going to remove it and manually create other custom modal implementation, thanks for the report
Author
Owner

@eduardolat commented on GitHub (Oct 6, 2025):

Fixed in v0.5.1

<!-- gh-comment-id:3370011902 --> @eduardolat commented on GitHub (Oct 6, 2025): Fixed in v0.5.1
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/pgbackweb#96
No description provided.