Incomplete url substring sanitization in wasm compiler #5737
Comments
|
@michaeljklein can you handle this when you're back on Monday? Should be really quick. |
5 tasks
github-merge-queue bot
pushed a commit
that referenced
this issue
Aug 21, 2024
# Description ## Problem\* Resolves #5737 ## Summary\* ## Additional Context ## Documentation\* Check one: - [x] No documentation needed. - [ ] Documentation included in this PR. - [ ] **[For Experimental Features]** Documentation to be submitted in a separate PR. # PR Checklist\* - [x] I have tested the changes locally. - [x] I have formatted the changes with [Prettier](https://prettier.io/) and/or `cargo fmt` on default settings.
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Aim
https://github.com/AztecProtocol/aztec-packages/security/code-scanning/7
Expected Behavior
Only github should be an allowed host
Bug
Someone could provide a malicious URL
To Reproduce
https://github.com/AztecProtocol/aztec-packages/security/code-scanning/7
Workaround
None
Workaround Description
No response
Additional Context
No response
Project Impact
None
Blocker Context
No response
Nargo Version
No response
NoirJS Version
No response
Proving Backend Tooling & Version
No response
Would you like to submit a PR for this Issue?
None
Support Needs
No response
The text was updated successfully, but these errors were encountered: