adam/procurement-ingest
1
0
Fork 0
mirror of https://github.com/Sea-Haven-Industries/procurement-ingest.git synced 2026-10-02 03:53:26 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
procurement-ingest/lambdas/po/web_ui
History
Adam Moussa 78eb8de067 Escape HTML in both web UI dashboards to prevent XSS 
Both Function URLs are public (auth_type=NONE) and render
email-derived content via f-strings. Attacker-crafted emails
could inject scripts. Added html.escape() on all interpolated
values in both PO and WO dashboards.
2026-05-12 14:32:01 -04:00
..
handler.py Escape HTML in both web UI dashboards to prevent XSS 2026-05-12 14:32:01 -04:00