public_git/bambuddy
1
0
Fork 0
mirror of https://github.com/maziggy/bambuddy.git synced 2026-10-18 03:54:17 +02:00
Code Issues Packages Projects Releases Wiki Activity

fix(gcode_viewer): close CodeQL XSS + useless-escape alerts on PR #1263

Browse Source 
- slider-shim.js: HTML-attribute-escape opts.id before interpolation
    (only caller passes a constant, but defends against future taint)
  - prettygcode.js: drop useless \\? escape inside [...] character class
This commit is contained in:
maziggy
2026-05-11 13:29:55 +02:00
parent ac72aacbfa
commit 686dce5af4
2 changed files with 12 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
gcode_viewer/js/prettygcode.js
+1 -1
View File
@@ -845,7 +845,7 @@ $(function () {
//util function
urlParam = function (name) {
var results = new RegExp('[\?&]' + name + '=([^&#]*)').exec(window.location.href);
var results = new RegExp('[?&]' + name + '=([^&#]*)').exec(window.location.href);
if (results == null) {
return null;
}