Fixes #20009: Fix DOM-based XSS vulnerability in search export functionality

Browse Source

Replace direct string concatenation with URLSearchParams to properly
encode user input in export link URLs, preventing injection of malicious
parameters or scripts through the search functionality.

Resolves CodeQL Alert #63 (js/xss-through-dom)

...

This commit is contained in:

Jason Novinger

2025-08-01 15:14:09 -05:00

committed by Jeremy Stretch

parent bb83187505

commit 2c09973e01

3 changed files with 7 additions and 5 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

2

netbox/project-static/dist/netbox.js vendored

File diff suppressed because one or more lines are too long