jquery-form/form

Fortify SCA: Code Injection .

Open

#554 aberto em 3 de ago. de 2018

Ver no GitHub
 (7 comments) (0 reactions) (0 assignees)JavaScript (2.199 forks)batch import
help wantedneed more info

Métricas do repositório

Stars
 (5.209 stars)
Métricas de merge de PR
 (Nenhuma PRs mesclada em 30d)

Description

Please review Instructions for Reporting a Bug.

Description:

I have no idea about whether it has been fixed in later versions. but the code scan is not passed.

Expected Behavior:

Actual behavior:

Source: jquery.form.js:812 Read xhr.responseXML() 810 var ct = xhr.getResponseHeader('content-type') || '', 811 xml = type === 'xml' || !type && ct.indexOf('xml') >= 0, 812 data = xml ? xhr.responseXML : xhr.responseText; 813 814 if (xml && data.documentElement.nodeName === 'parsererror') { Sink: jquery.form.js:781 setTimeout() 779 780 // clean up 781 setTimeout(function() { 782 if (!s.iframeTarget) { 783 $io.remove();

Versions:

jqform:3.51

Guia do colaborador