Fix code scanning alert issue OWASP-BLT#1358

JisanAR03 · Oct 22, 2023 · 948d738 · 948d738
1 parent 2095c73
commit 948d738
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 2 deletions.
diff --git a/website/static/vendor/jquery/jquery.js b/website/static/vendor/jquery/jquery.js
@@ -5700,7 +5700,8 @@
 
     jQuery.extend({
         htmlPrefilter: function (html) {
-            return html.replace(rxhtmlTag, "<$1></$2>");
+            var sanitizedHTML = sanitizeHTML(html);
+            return sanitizedHTML.replace(rxhtmlTag, "<$1></$2>");
         },
 
         clone: function (elem, dataAndEvents, deepDataAndEvents) {

diff --git a/website/templates/join.html b/website/templates/join.html
@@ -386,7 +386,7 @@
 {% endblock %}
 
 {% block content %}
-<script src="https://cdnjs.cloudflare.com/ajax/libs/velocity/1.2.1/velocity.min.js" integrity="sha384-WT0CC+OrC0vGKpxNQInSyfMeKWFIpgiHtnV9HsqN0g6n9urfDfEUQJZFpT0t9P4U" crossorigin="anonymous"></script>
+<script src="https://cdnjs.cloudflare.com/ajax/libs/velocity/1.2.1/velocity.min.js"></script>
 
 <div class="join-body">
   <div id="svg_wrap"></div>