Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Feature - Bump SDK to auto escape all product tagging #292

Merged
merged 5 commits into from
Apr 8, 2019

Conversation

supercid
Copy link
Member

@supercid supercid commented Apr 5, 2019

Description

Bumps SDK and encode HTML characters that are present in product tagging.

Related Issue

Fixes #281

How Has This Been Tested?

Tested searching for a escaped script javascript tag on the search query and double encoding product attributes/search term. They are correctly being escaped.

Checklist:

  • My code follows the code style of this project.
  • All new and existing tests passed.
  • I have assigned the correct milestone or created one if non existent.
  • I have correctly labeled this pull request.
  • I have linked the corresponding issue in this description.
  • I have updated the corresponding Jira ticket.
  • I have requested a review from at least 2 reviewers
  • I have checked the base branch of this pull request
  • I have checked my code for any possible security vulnerabilities

@supercid supercid added this to the 3.6.4 milestone Apr 5, 2019
@supercid supercid self-assigned this Apr 5, 2019
@supercid supercid changed the title Feature/escape all product tagging Feature - Bump SDK to auto escape all product tagging Apr 8, 2019
composer.json Show resolved Hide resolved
@mridang mridang self-requested a review April 8, 2019 08:03
Copy link
Contributor

@mridang mridang left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good but please sanity check my comment.

@supercid
Copy link
Member Author

supercid commented Apr 8, 2019

@mridang Couldn't find anything wrong. Also did some testing and seems to be working fine.

@supercid supercid merged commit afbba6f into develop Apr 8, 2019
@supercid supercid deleted the feature/escape-all-product-tagging branch April 8, 2019 11:03
@supercid supercid modified the milestones: 3.6.4, 3.7.0 Apr 15, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Encode all product attributes in tagging bug
3 participants