Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Release workflow #1

Closed
wants to merge 2 commits into from
Closed

Release workflow #1

wants to merge 2 commits into from

Conversation

mirhmousavi
Copy link

No description provided.

console.error(`pdf.js: no handler for postMessage with type ${type}`)
return;
}
return handler(msg);

Check failure

Code scanning / CodeQL

Unvalidated dynamic method call High

Invocation of method with
user-controlled
name may dispatch to unexpected target and cause an exception.
const { type, msg } = event.data;
const handler = postMessageHandlers[type];
if (!handler) {
console.error(`pdf.js: no handler for postMessage with type ${type}`)

Check warning

Code scanning / CodeQL

Log injection Medium

Log entry depends on a
user-provided value
.
}
};

function handlePostMessage(event) {

Check warning

Code scanning / CodeQL

Missing origin verification in `postMessage` handler Medium

Postmessage handler has no origin check.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants