Commit b5886479 by Torkel Ödegaard Committed by GitHub

NewsPanel: Fixed XSS issue when rendering rss links (#27612)

parent 58124efd
......@@ -77,7 +77,7 @@ export class NewsPanel extends PureComponent<Props, State> {
{news.map((item, index) => {
return (
<div key={index} className={styles.item}>
<a href={item.link} target="_blank">
<a href={textUtil.sanitizeUrl(item.link)} target="_blank">
<div className={styles.title}>{item.title}</div>
<div className={styles.date}>{dateTimeFormat(item.date, { format: 'MMM DD' })} </div>
</a>
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment