Skip to content

Feature/ecasogp 12038 about us - #1115

Open
stacyaharfenist wants to merge 1 commit into
stagingfrom
feature/ECASOGP-12038-about-us
Open

Feature/ecasogp 12038 about us#1115
stacyaharfenist wants to merge 1 commit into
stagingfrom
feature/ECASOGP-12038-about-us

Conversation

@stacyaharfenist

Copy link
Copy Markdown
Contributor

No description provided.

// Inserting the attribute to open a link in a new tab on each link
let relevant_course = item.relevant_courses[i];
if (typeof (relevant_course) === 'string' && relevant_course.indexOf('">') >= 0) {
relevant_course = relevant_course.replace('>', ' target="_blank" >');

Check failure

Code scanning / CodeQL

Incomplete string escaping or encoding

This replaces only the first occurrence of '>'.
// Inserting the attribute to open a link in a new tab on each link
let relevant_course = item.relevant_courses[i];
if (typeof (relevant_course) === 'string' && relevant_course.indexOf('">') >= 0) {
relevant_course = relevant_course.replace('>', ' target="_blank" >');

Check failure

Code scanning / CodeQL

Incomplete string escaping or encoding

This replaces only the first occurrence of '>'.
image
.animate({ opacity: 0 }, 100, function () {
image
.attr('src', imageSource)

Check warning

Code scanning / CodeQL

DOM text reinterpreted as HTML

[DOM text](1) is reinterpreted as HTML without escaping meta-characters.

};

imageToLoad.src = imageSource;

Check warning

Code scanning / CodeQL

DOM text reinterpreted as HTML

[DOM text](1) is reinterpreted as HTML without escaping meta-characters.
imageToLoad.onload = function () {

image
.attr('src', imageSource)

Check warning

Code scanning / CodeQL

DOM text reinterpreted as HTML

[DOM text](1) is reinterpreted as HTML without escaping meta-characters.
$('html').css(windowStyles);

// add everything to DOM
mfp.bgOverlay.add(mfp.wrap).prependTo( mfp.st.prependTo || $(document.body) );

Check warning

Code scanning / CodeQL

Unsafe jQuery plugin

Potential XSS vulnerability in the ['$.fn.magnificPopup' plugin](1).
_mfpTrigger('FirstMarkupParse', markup);

if(markup) {
mfp.currTemplate[type] = $(markup);

Check warning

Code scanning / CodeQL

Unsafe jQuery plugin

Potential XSS vulnerability in the ['$.fn.magnificPopup' plugin](1).
.then(function (posts) {
totalResults = posts.web.total;
document.getElementById("search-params").innerHTML =
urlParams.get("query");

Check failure

Code scanning / CodeQL

Client-side cross-site scripting

Cross-site scripting vulnerability due to [user-provided value](1).
document.getElementById("search-params").innerHTML =
urlParams.get("query");
document.getElementById("search-keyword").innerHTML =
urlParams.get("query");

Check failure

Code scanning / CodeQL

Client-side cross-site scripting

Cross-site scripting vulnerability due to [user-provided value](1).
if (totalResults > (page * resultsPerPage)) {
pagerLinks += '<a href="' + getLinkToPage(parseInt(page) + 1) + '" aria-label="Next page">Next >></a>';
}
pager.innerHTML = pagerLinks;

Check failure

Code scanning / CodeQL

Client-side cross-site scripting

Cross-site scripting vulnerability due to [user-provided value](1).
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants