New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Fix wrong regexp validation #14

Open

ken1flan wants to merge 1 commit into master from Fix_wrong_regexp_validation

Owner

ken1flan commented May 3, 2018 •

edited

Loading

ユーザのプロフィールでホームページを設定できますが、
そこで1行目にjavascript、2行目にURLを入れてもバリデーションOKになってしまっており、
Javascriptインジェクションが行えてしまっています。

正規表現のチェックを行の先頭からではなく、文の先頭に変更して、不正な文字列を入力できないようにします。


          Fix wrong regexp validation

573874e

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet