Fascinated/Minetrack
1
0
Fork 0
Code Issues Pull Requests 1 Actions Packages Projects Releases Wiki Activity
7b8f91af68
Minetrack/.eslintignore

1 line
1 B
Plaintext
Raw Normal View History

Fix XSS by parsing player counts as raw data and validating favicon URIs (#116) * Fix XSS by parsing player counts as raw data (instead of parsing it) * Ensure the returned favicon is a data URI * Force server favicon size to 64px * Increase specificity of data URI validation The previous commit would happily accept any domain (or subdomain) that started with "data"
2019-09-05 23:15:44 +02:00
*
Reference in New Issue Copy Permalink