NewsPanel: Fixed XSS issue when rendering rss links (#27612)

2026-07-30 00:08:10 -05:00 · 2020-09-16 11:15:56 +02:00
parent 58124efdb5
commit b58864792d
1 changed files with 1 additions and 1 deletions
@@ -77,7 +77,7 @@ export class NewsPanel extends PureComponent<Props, State> {
        {news.map((item, index) => {
          return (
            <div key={index} className={styles.item}>
-              <a href={item.link} target="_blank">
+              <a href={textUtil.sanitizeUrl(item.link)} target="_blank">
                <div className={styles.title}>{item.title}</div>
                <div className={styles.date}>{dateTimeFormat(item.date, { format: 'MMM DD' })} </div>
              </a>