5 ms·
Don't know the details of the vulnerability, but from the comfort of my armchair, it sounds like it's being patched in the wrong location. e.g. It's better to
by janpot 5y ago
Don't know the details of the vulnerability, but from the comfort of my armchair, it sounds like it's being patched in the wrong location.
e.g. It's better to fix an XSS issue by escaping the input, rather than restricting the values it can take.
- boleary-gl 5y agoIt doesn't represent any XSS - the details are here: https://gitlab.com/gitlab-org/gitlab/-/issues/26295 https://gitlab.com/gitlab-org/gitlab/-/issues/26295
- janpot 5y agoI was just using XSS as an analogy.