Postgres Pro
Downloads
Home   >   mailing lists

[pgadmin-hackers] security bug (with patch-fix) -- need more HTML-escaping for working with tree-nodes - Mailing list pgadmin-hackers

From Andrei Antonov
Subject [pgadmin-hackers] security bug (with patch-fix) -- need more HTML-escaping for working with tree-nodes
Date
Msg-id b6c79719012594bfe674b809337298b1@imp-m.ru
Whole thread Raw
Responses Re: [pgadmin-hackers] security bug (with patch-fix) -- need moreHTML-escaping for working with tree-nodes
List pgadmin-hackers
Tree view 
good day!

i fixed tiny errors (html-escaping) , but it has security effects.

see file
"0001-escape-label-of-node-of-tree-when-events-add-remove-.patch" [
https://github.com/postgres-impulsm/pgadmin4/commit/f993513d148fc6dd7e0196261f847e668d5e2c6c
]




--
Андрей Антонов,
инженер-программист Отдела информационных технологий и программирования,
компания «Импульс М»
Attachment

pgadmin-hackers by date:

Previous
From: Harshal Dhumal
Date:
Subject: Re: [pgadmin-hackers] Re: Server side cursor limitations for ondemand loading of data in query tool [RM2137] [pgAdmin4]
Next
From: Murtuza Zabuawala
Date:
Subject: [pgadmin-hackers] [pgAdmin4][PATCH] To fix the of issue in Trigger node