honeymoose/OpenSearch - OpenSearch - iSharkFly SRC

honeymoose/OpenSearch

mirror of https://github.com/honeymoose/OpenSearch.git synced 2025-02-10 06:55:32 +00:00

1 line

40 B

Plaintext

Raw Normal View History

Upgrade to the latest OWASP HTML sanitizer (#50765) (#51166) This commit upgrades the OWASP HTML sanitizer used by watcher to the latest version and also upgrades guava, which it depends on. The guava upgrade also requires the addition of a new dependency that guava itself requires as of version 27.0. The sanitizer's behavior has changed to re-write these templated values with a comment that results in this output `{{ctx.metadata.name}}`. This would be an issue if we attempted to sanitize the template, but the code that uses the sanitizer runs the rendered string through the sanitizer, which means that the templated values have been replaced already. Relates #50395

2020-01-17 10:00:33 -07:00

fb8b19019d7673e70c4a6111f7d0cb2b0cf0e513