Skip to content

fix: Fix sanitization of HTML code that is injected into Catalog web - #5027

Merged
richard-salac merged 2 commits into
v3.x.xfrom
reboot/ZOWESERVER_ZOWE_API-LAYER_V3-X_X-004
Oct 20, 2026
Merged

richard-salac merged 2 commits into
v3.x.xfrom
reboot/ZOWESERVER_ZOWE_API-LAYER_V3-X_X-004

Conversation

@pavel-jares-bcm

Copy link
Copy Markdown
Contributor

Description

There is usage of <div dangerouslySetInnerHTML. To use is properly we should sanitized the code, but there is no potential risk since the code is generated by us. This PR add sanitization to relax static code analyzers.

ZOWESERVER_ZOWE_API-LAYER_V3-X_X-004

Linked to # (issue)
Part of the # (epic)

Type of change

Please delete options that are not relevant.

  • fix: Bug fix (non-breaking change which fixes an issue)

Checklist:

  • My code follows the style guidelines of this project
  • PR title conforms to commit message guideline ## Commit Message Structure Guideline
  • My changes generate no new warnings
  • Any dependent changes have been merged and published in downstream modules

For more details about how should the code look like read the Contributing guideline

Signed-off-by: Pavel Jareš <Pavel.Jares@broadcom.com>
@pavel-jares-bcm
pavel-jares-bcm marked this pull request as ready for review October 16, 2026 13:25
@pavel-jares-bcm
pavel-jares-bcm marked this pull request as draft October 16, 2026 13:26
@richard-salac
richard-salac marked this pull request as ready for review October 20, 2026 12:52
@sonarqubecloud

Copy link
Copy Markdown

@richard-salac
richard-salac merged commit da8f25f into v3.x.x Oct 20, 2026
51 checks passed
@richard-salac
richard-salac deleted the reboot/ZOWESERVER_ZOWE_API-LAYER_V3-X_X-004 branch October 20, 2026 13:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants