Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Blankie not sanitizing request payload #37

Open
Kumaraditya03 opened this issue Jun 23, 2020 · 0 comments
Open

Blankie not sanitizing request payload #37

Kumaraditya03 opened this issue Jun 23, 2020 · 0 comments

Comments

@Kumaraditya03
Copy link

We have registered the plugin following the documentation.
We have our request payload with <script> in it...but blankie is not sanitizing it.
Payload:
fieldName: "<script>alert("hi")</script>"
expected behaviour on sanitization;
fieldName:""
current behaviour:
fieldName: "<script>alert("hi")</script>"

Is this the usual behaviour of blankie or does it sanitize the request payload with inline scripts?
Team, please let me know about the above.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant