New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

EJS vulnerability for 2.6.X fix? #4230

Open

TannerS opened this issue Jul 5, 2024 · 1 comment

TannerS commented Jul 5, 2024

Is there a fix for the EJS vulnerability issue but for the version two of Nightwatch?

?

If not, is it possible to get one?

MdMahdiHasanTazelly commented Jul 30, 2024

@TannerS Please tell me what kind of vulnerability issues you are asking for. I mean more specifically.

Basic probable remedy

before rendering ejs template, the user inputs should be sanitized,
Also, security middleware can be used in the .js file

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment