-
Notifications
You must be signed in to change notification settings - Fork 792
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Deletion of the HtmlFieldDescription function #3129
Conversation
Codecov ReportPatch and project coverage have no change.
Additional details and impacted files@@ Coverage Diff @@
## develop #3129 +/- ##
========================================
Coverage 71.75% 71.75%
========================================
Files 449 449
Lines 12827 12827
========================================
Hits 9204 9204
Misses 3623 3623 Help us with your feedback. Take ten seconds to tell us how you rate us. Have a feature suggestion? Share it here. ☔ View full report in Codecov by Sentry. |
3e9a9c3
to
20bb67d
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
GJ!
@@ -332,7 +331,6 @@ class ConfigurePageComponent extends AuthComponent { | |||
selectedSection: this.state.selectedSection | |||
}) | |||
formProperties['schema'] = displayedSchema | |||
formProperties['fields'] = {DescriptionField: HtmlFieldDescription}; |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This isn't needed at all anymore? How does this affect the configuration page?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Currently, nothing is passed to this property so it doesn't affect anything.
If a need to render dangerous html will be raised in the future we'll create a better solution.
What does this PR do?
Related to #3081.
Deletion of the HtmlFieldDescription function and its usages due to XSS vulnerability.
PR Checklist
Testing Checklist
If applicable, add screenshots or log transcripts of the feature working