Title: fix(security): escape mXSS-detection text fallback in sanitizeHtmlCore by JosunLP · Pull Request #182 · bQuery/bQuery · GitHub
Open Graph Title: fix(security): escape mXSS-detection text fallback in sanitizeHtmlCore by JosunLP · Pull Request #182 · bQuery/bQuery
X Title: fix(security): escape mXSS-detection text fallback in sanitizeHtmlCore by JosunLP · Pull Request #182 · bQuery/bQuery
Description: Batteries-included TypeScript framework for the modern web — signals, SSR, Web Components, routing, and more — with a jQuery-inspired API and zero mandatory build step. - fix(security): escape mXSS-detection text fallback in sanitizeHtmlCore by JosunLP · Pull Request #182 · bQuery/bQuery
Open Graph Description: Summary Fixes #162 (Critical). The anti-mXSS double-parse in sanitizeHtmlCore returned raw, unescaped fragment.textContent when the serialize→re-parse output was unstable. Every caller assigns the ...
X Description: Summary Fixes #162 (Critical). The anti-mXSS double-parse in sanitizeHtmlCore returned raw, unescaped fragment.textContent when the serialize→re-parse output was unstable. Every caller assigns the ...
Opengraph URL: https://github.com/bQuery/bQuery/pull/182
X: @github
Domain: github.com
| route-pattern | /_view_fragments/voltron/pull_requests/show/:user_id/:repository/:id/pull_request_layout(.:format) |
| route-controller | voltron_pull_requests_fragments |
| route-action | pull_request_layout |
| fetch-nonce | v2:213a2d0f-162b-3318-301d-a85ccf2edac0 |
| current-catalog-service-hash | ae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b |
| request-id | ADCA:FCF93:205D3F:2F6A15:6A4E003B |
| html-safe-nonce | 0806cd7863b3f391846796064b7ca993d9e5e50fae9ad353c32d1b4f047eda64 |
| visitor-payload | eyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJBRENBOkZDRjkzOjIwNUQzRjoyRjZBMTU6NkE0RTAwM0IiLCJ2aXNpdG9yX2lkIjoiODc4MjM5NTQwNjkxNjkxMTE2MyIsInJlZ2lvbl9lZGdlIjoiaWFkIiwicmVnaW9uX3JlbmRlciI6ImlhZCJ9 |
| visitor-hmac | 6aa3122786ef93eac1e5e05a901b7c2b260a1f8aecc0d464f2c2d3b3c4bbc163 |
| hovercard-subject-tag | pull_request:4000822471 |
| github-keyboard-shortcuts | repository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot |
| google-site-verification | Apib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I |
| octolytics-url | https://collector.github.com/github/collect |
| analytics-location | / |
| fb:app_id | 1401488693436528 |
| apple-itunes-app | app-id=1477376905, app-argument=https://github.com/_view_fragments/voltron/pull_requests/show/bQuery/bQuery/182/pull_request_layout |
| twitter:image | https://opengraph.githubassets.com/97c714a016cfe916d63e9039b36fab88486d19c1098c761393d6cfff084bbe85/bQuery/bQuery/pull/182 |
| twitter:card | summary_large_image |
| og:image | https://opengraph.githubassets.com/97c714a016cfe916d63e9039b36fab88486d19c1098c761393d6cfff084bbe85/bQuery/bQuery/pull/182 |
| og:image:alt | Summary Fixes #162 (Critical). The anti-mXSS double-parse in sanitizeHtmlCore returned raw, unescaped fragment.textContent when the serialize→re-parse output was unstable. Every caller assigns the ... |
| og:image:width | 1200 |
| og:image:height | 600 |
| og:site_name | GitHub |
| og:type | object |
| og:author:username | JosunLP |
| hostname | github.com |
| expected-hostname | github.com |
| None | df0492960db29b4938cb72070351d6b1d0c6c0767b27ceb8394bbf4fcc0223c6 |
| turbo-cache-control | no-cache |
| go-import | github.com/bQuery/bQuery git https://github.com/bQuery/bQuery.git |
| octolytics-dimension-user_id | 256381806 |
| octolytics-dimension-user_login | bQuery |
| octolytics-dimension-repository_id | 1139284244 |
| octolytics-dimension-repository_nwo | bQuery/bQuery |
| octolytics-dimension-repository_public | true |
| octolytics-dimension-repository_is_fork | false |
| octolytics-dimension-repository_network_root_id | 1139284244 |
| octolytics-dimension-repository_network_root_nwo | bQuery/bQuery |
| turbo-body-classes | logged-out env-production page-responsive |
| disable-turbo | false |
| browser-stats-url | https://api.github.com/_private/browser/stats |
| browser-errors-url | https://api.github.com/_private/browser/errors |
| release | 52bde38e24398476f8eb1e0760c81346c6a00812 |
| ui-target | canary-1 |
| theme-color | #1e2327 |
| color-scheme | light dark |
Links:
Viewport: width=device-width