Skip to content

Conversation

@oyeaussie
Copy link
Contributor

No description provided.

- Added .gitignore for apptypes
- Fixed not able to add differnt version to dependency
- Fixed URL for Core and non core modules
- Fixed github link for apptypes
- Added option to add query only specific repository for a module instead of the whole organization
- Cleanup apis generic form/view.
- API client services should only list apis that are available for core in core app_type.
- Fix information displayed on repo create to add all instead of * as we want to include .(dot) files like .gitignore as well.
- Fix not able to grab categories that are camel case.
- Fixed exception for template for timezone component
- Fixed TZ extraction from wikipedia failing.
- Refactored widgets and dashboard components/packages.
- Removed old widgetsserviceprovider as its moved to basepackages.
- Removed clocks information from settings and we are going to use timezone package information to obtains clock information.
- Fixed bugs pertaining to extraction of data from wikipedia.
- Fixed permissions for dashboard.
- Added shared for dashboard. added remove for dashboard
- Condition to disallow deletion of app default dashboard.
- Added name, app_type and display name to queue information.
- WIP on installer, refactoring, cleanup.
- Added correct encoding for substr
@github-advanced-security
Copy link

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.

Comment on lines +489 to +490
href +
$('#{{componentId}}-{{sectionId}}-dashboards').select2().val()

Check failure

Code scanning / CodeQL

DOM text reinterpreted as HTML High

DOM text
is reinterpreted as HTML without escaping meta-characters.

Copilot Autofix

AI 12 months ago

To fix the problem, we need to ensure that the value obtained from select2().val() is properly encoded before being used in the URL. This can be achieved by using a function that encodes the value to make it safe for inclusion in a URL. JavaScript's encodeURIComponent function is suitable for this purpose.

  • We will modify the code to use encodeURIComponent on the value obtained from select2().val().
  • This change will be made on line 490 where the value is concatenated with the href.
Suggested changeset 1
apps/Core/Views/Default/html/dashboards/dashboards.html

Autofix patch

Autofix patch
Run the following command in your local git repository to apply this patch
cat << 'EOF' | git apply
diff --git a/apps/Core/Views/Default/html/dashboards/dashboards.html b/apps/Core/Views/Default/html/dashboards/dashboards.html
--- a/apps/Core/Views/Default/html/dashboards/dashboards.html
+++ b/apps/Core/Views/Default/html/dashboards/dashboards.html
@@ -488,4 +488,4 @@
                     'href',
-                    href +
-                    $('#{{componentId}}-{{sectionId}}-dashboards').select2().val()
+                    href + 
+                    encodeURIComponent($('#{{componentId}}-{{sectionId}}-dashboards').select2().val())
                 );
EOF
@@ -488,4 +488,4 @@
'href',
href +
$('#{{componentId}}-{{sectionId}}-dashboards').select2().val()
href +
encodeURIComponent($('#{{componentId}}-{{sectionId}}-dashboards').select2().val())
);
Copilot is powered by AI and may make mistakes. Always verify output.
Unable to commit as this autofix suggestion is now outdated
@oyeaussie oyeaussie merged commit bc564f8 into main Jan 31, 2025
2 of 4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants