-
Notifications
You must be signed in to change notification settings - Fork 5.8k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Escape HTML from messages in error page #4430
Conversation
Codecov Report
@@ Coverage Diff @@
## main #4430 +/- ##
==========================================
+ Coverage 66.04% 66.41% +0.37%
==========================================
Files 30 30
Lines 1602 1602
Branches 315 315
==========================================
+ Hits 1058 1064 +6
+ Misses 466 461 -5
+ Partials 78 77 -1
Continue to review full report at Codecov.
|
WOW! Not only did you fix this, but you added tests! This has to be a first (at least in a while) 🎉 |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
query: { | ||
to: "test", | ||
}, | ||
} as unknown as express.Request |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Bummer we have to do this but I don't see any better alternatives
The Docs preview is broken on forks at the moment but as long as everything else passes (it should), then we can merge! |
Looks like E2E tests are failing to run, showing |
Classic. Probably a |
Do you mind rebasing onto We pushed a fix for playwright so hopefully everything works 🤞 |
@jsjoeio rebased onto main branch 👍 |
There's a high chance this doesn't work (e2e tests are failing on other PRs for some odd reason). We think this might fix but we'll see. So sorry for all the CI trouble! |
@jsjoeio is there anything else I should do? |
@mauri thanks for the ping! Looks like @code-asher updated your branch. Once CI finishes, we should be good to merge! |
Fixes #4355
Escapes HTML contained in error messages before rendering the error page.