Fixed XSS vulnerabilities

craftcms · Apr 5, 2023 · 053d711 · 053d711
1 parent 5663224
commit 053d711
Show file tree

Hide file tree

Showing 5 changed files with 11 additions and 5 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -5,6 +5,7 @@
 - Fixed a bug where users were “View other users’ drafts” section permissions weren’t being enforced for unpublished drafts.
 - Fixed a bug where element editors were showing provisional changes, even if the user didn’t have permission to save them.
 - `craft\web\View::renderObjectTemplate()` now trims the returned template output.
+- Fixed XSS vulnerabilities.
 
 ## 4.4.6.1 - 2023-04-04
 

diff --git a/packages/craftcms-webpack/Craft.d.ts b/packages/craftcms-webpack/Craft.d.ts
@@ -20,6 +20,7 @@ declare var Craft: {
   sendActionRequest(method: string, action: string, options?: object): Promise;
   initUiElements($container: JQuery): void;
   expandPostArray(arr: object): any;
+  escapeHtml(str: string);
   Preview: any;
   cp: any;
 };