Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix: sanitize options passed to HC methods #613

Merged
merged 16 commits into from
Apr 30, 2024
Merged

Conversation

DiegoCardoso
Copy link
Contributor

Description

Apply the workaround described here on the methods that use options in Highcharts to sanitize them and prevent any unwanted script to be executed.
We must do it like this because Highcharts cannot be updated to V9+ in Charts for V14.

Fixes vaadin/web-components#7294

Type of change

  • Bugfix
  • Feature

@DiegoCardoso
Copy link
Contributor Author

I need to fix the P3 build.

@DiegoCardoso DiegoCardoso marked this pull request as draft April 10, 2024 14:49
@DiegoCardoso DiegoCardoso force-pushed the fix/sanitize-options branch from 7af197c to 729dcd1 Compare April 15, 2024 09:24
@yuriy-fix yuriy-fix force-pushed the fix/sanitize-options branch from 1fd9029 to 85431fe Compare April 17, 2024 20:41
@yuriy-fix yuriy-fix force-pushed the fix/sanitize-options branch from 9f753fb to 285973d Compare April 17, 2024 21:16
@DiegoCardoso DiegoCardoso removed the request for review from ugur-vaadin April 18, 2024 06:57
@DiegoCardoso DiegoCardoso marked this pull request as ready for review April 18, 2024 07:42
@DiegoCardoso
Copy link
Contributor Author

Build is green again thanks to @yuriy-fix, so I am marking this PR ready for review again.

@DiegoCardoso DiegoCardoso merged commit 60f5219 into master Apr 30, 2024
4 checks passed
@DiegoCardoso DiegoCardoso deleted the fix/sanitize-options branch April 30, 2024 08:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Vulnerable Highcharts.js version 6.1.4 in Vaadin 14 vaadin-charts [2 days]
4 participants