Przeglądaj źródła

Fix more reflective XSS issues

Jordi Boggiano 8 lat temu
rodzic
commit
dbcfd5cb41

+ 4 - 0
src/Packagist/WebBundle/Resources/public/js/search.js

@@ -6,6 +6,10 @@ document.getElementById('search_query_query').addEventListener('keydown', functi
 
 var searchParameters = {};
 
+if (decodeURI(location.search).match(/[<>]/)) {
+    location.replace(location.pathname);
+}
+
 if (algoliaConfig.tags) {
     searchParameters.disjunctiveFacets = ['tags'];
     searchParameters.disjunctiveFacetsRefinements = {