Code

Fix 4 security vulnerabilities#4390

Code

Merged

mistercrunch merged 6 commits intoapache:masterapache/superset:masterfrom ddworken-sc:masterddworken-sc/incubator-superset:masterCopy head branch name to clipboardFeb 9, 2018

+22-5

Commits

Commits on Feb 8, 2018

• Switched yaml.load to yaml.safe_load to prevent code execution via crafted yaml files

  Show description for 7e949ee
  ddworken-sc

  committed
  7e949ee

  Copy full SHA for 7e949ee

• Fixed XSS via bleach

  Show description for b6fcc22
  ddworken-sc

  committed
  b6fcc22

  Copy full SHA for b6fcc22

• Added XFO header by default to prevent clickjacking attacks

  Show description for f113d2b
  ddworken-sc

  committed
  f113d2b

  Copy full SHA for f113d2b

• Added justification for dangerouslySetInnerHTML

  ddworken-sc

  committed
  6f00074

  Copy full SHA for 6f00074

Commits on Feb 9, 2018

• Fixed linting errors

  ddworken-sc

  committed
  31c00f1

  Copy full SHA for 31c00f1

• Fixed linting errors

  ddworken-sc

  committed
  164ac1f

  Copy full SHA for 164ac1f