Code

N8N-2962 prevent expressions XSS#3366

Code

Merged

janober merged 2 commits intomastern8n-io/n8n:masterfrom n8n-2962-lockdown-expressions-xssn8n-io/n8n:n8n-2962-lockdown-expressions-xssCopy head branch name to clipboardMay 27, 2022

+27

Commits

Commits on May 24, 2022

• ✨ Added checks for window object access in template strings.

  alexgrozav

  committed
  567f85d

Commits on May 25, 2022

• ✨ Added self, prompt and confirm to blocklist. Changed window usage condition.

  alexgrozav

  committed
  1b2efac