torsten/harheimertc
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Enhance security by adding DOMPurify sanitization comments in newsletter and Vereins components, and update path handling comments in server utilities to address potential path traversal vulnerabilities.
Some checks failed
Code Analysis (JS/Vue) / analyze (push) Failing after 3m28s
Details

Browse Source
This commit is contained in:
Torsten Schulz (local)
2025-12-20 10:54:49 +01:00
parent 316cce1b26
commit 968c749fe3
12 changed files with 33 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
pages/cms/newsletter.vue
View File

@@ -166,6 +166,8 @@
Keine Empfänger gefunden
</span>
</div>
<!-- nosemgrep: javascript.vue.security.audit.xss.templates.avoid-v-html -->
<!-- content is sanitized with DOMPurify via useSanitizeHtml -->
<div
class="text-sm text-gray-600 prose prose-sm max-w-none mb-3"
v-html="useSanitizeHtml(post.content.substring(0, 200) + (post.content.length > 200 ? '...' : ''))"

2
pages/verein/geschichte.vue
View File

@@ -4,6 +4,8 @@
<h1 class="text-4xl sm:text-5xl font-display font-bold text-gray-900 mb-6">
Geschichte
</h1>
<!-- nosemgrep: javascript.vue.security.audit.xss.templates.avoid-v-html -->
<!-- content is sanitized with DOMPurify in computed property -->
<div
class="prose prose-lg max-w-none"
v-html="content"

2
pages/verein/satzung.vue
View File

@@ -5,6 +5,8 @@
Satzung
</h1>
<!-- nosemgrep: javascript.vue.security.audit.xss.templates.avoid-v-html -->
<!-- content is sanitized with DOMPurify in computed property -->
<div
class="prose prose-lg max-w-none mb-8"
v-html="content"

2
pages/verein/tt-regeln.vue
View File

@@ -4,6 +4,8 @@
<h1 class="text-4xl sm:text-5xl font-display font-bold text-gray-900 mb-6">
TT-Regeln
</h1>
<!-- nosemgrep: javascript.vue.security.audit.xss.templates.avoid-v-html -->
<!-- content is sanitized with DOMPurify in computed property -->
<div
class="prose prose-lg max-w-none"
v-html="content"

2
pages/verein/ueber-uns.vue
View File

@@ -4,6 +4,8 @@
<h1 class="text-4xl sm:text-5xl font-display font-bold text-gray-900 mb-6">
Über uns
</h1>
<!-- nosemgrep: javascript.vue.security.audit.xss.templates.avoid-v-html -->
<!-- content is sanitized with DOMPurify in computed property -->
<div
class="prose prose-lg max-w-none"
v-html="content"