GMS-2017-329: Sanitization bypassing leading to XSS

October 27, 2017

Arbitrary HTML can pass the sanitization process, which can be unexpected and dangerous (XSS) in case user-controlled input is passed to the clean function.

Code Behaviors & Features

Detect and mitigate GMS-2017-329 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →