Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

High Security issue XSS on ocLazyLoad 0.5.2 at 235 line #438

Open
bonaerges opened this issue Mar 19, 2020 · 1 comment
Open

High Security issue XSS on ocLazyLoad 0.5.2 at 235 line #438

bonaerges opened this issue Mar 19, 2020 · 1 comment

Comments

@bonaerges
Copy link

We have scan code by veracode using oclazyload.js version 0.5.2 and a High security issue has been found
"Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) (CWE ID
80) at oclazyload.jss 235 line"

angular.forEach(angular.element(data), function(node) {
if(node.nodeName === 'SCRIPT' && node.type === 'text/ng-template') {
$templateCache.put(node.id, node.innerHTML);
}

We use angular 1.6.9 and oclazyload.js v 0.5.2

image

We need to know how to solve in less than 60 days.PLease advice.

Thanks in advance.

@KHANRAA
Copy link

KHANRAA commented Dec 21, 2020

+1

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants