XSS Vulnerability in bioconductor.org
Opened this issue · 1 comments
Pranyub commented
Hey there, I found a security vulnerability in bioconductor.org:
The search bar in bioconductor.org does not sanitize user input, leading to an XSS vulnerability.
(correlating to the function searchResponse in /assets/js/search.js)
Example: https://bioconductor.org/help/search/index.html?q=<script>alert(1)</script>
A fix to this issue is to sanitize input according to OWASP's recommendations
Thanks.
wendeee commented
Hello, I noticed this issue has not been fixed.
Would love to work on it.
Can it be assigned to me?