Merge pull request #39 from actions/ajaykn/fix-codescan-xss

Fixing cross site scripting codescan alert
2022-05-24 15:02:12 +09:00
parent 9f9e05c05e 583a6f059c
commit f954333d85
1 changed files with 1 additions and 1 deletions
--- a/test/github.go
+++ b/test/github.go
@@ -159,7 +159,7 @@ func main() {

 		if repoName != existingRepo {
 			w.WriteHeader(http.StatusNotFound)
-			_, err := w.Write([]byte(fmt.Sprintf("Repo %s not found", repoName)))
+			_, err := w.Write([]byte(fmt.Sprintf("Repo %s not found", html.EscapeString(repoName))))
 			if err != nil {
 				panic(err)
 			}