jquery-form/form

Fortify SCA: Code Injection .

Open

#554 aperta il 3 ago 2018

Vedi su GitHub
 (7 commenti) (0 reazioni) (0 assegnatari)JavaScript (2199 fork)batch import
help wantedneed more info

Metriche repository

Star
 (5209 star)
Metriche merge PR
 (Nessuna PR mergiata in 30 g)

Descrizione

Please review Instructions for Reporting a Bug.

Description:

I have no idea about whether it has been fixed in later versions. but the code scan is not passed.

Expected Behavior:

Actual behavior:

Source: jquery.form.js:812 Read xhr.responseXML() 810 var ct = xhr.getResponseHeader('content-type') || '', 811 xml = type === 'xml' || !type && ct.indexOf('xml') >= 0, 812 data = xml ? xhr.responseXML : xhr.responseText; 813 814 if (xml && data.documentElement.nodeName === 'parsererror') { Sink: jquery.form.js:781 setTimeout() 779 780 // clean up 781 setTimeout(function() { 782 if (!s.iframeTarget) { 783 $io.remove();

Versions:

jqform:3.51

Guida contributor