Seeking advice on Atlas XSS vulnerabilities

2020-05-29 Thread Melinda Crane
seems to be *the* default object mapper, are there any insidious or otherwise consequences of force escaping HTML sensitive characters in it? Thank you kindly for any advice. From, Melinda Crane

Re: Seeking advice on Atlas XSS vulnerabilities

2020-06-10 Thread Melinda Crane
), and it seems like it would be useful for other companies down the road who have stricter security requirements. Where the sanitization would happen is of course completely up to you folks! Cheers, Melinda Crane On Tue, Jun 9, 2020 at 10:46 AM Madhan Neethiraj wrote: > Bolke, > > >

Re: Seeking advice on Atlas XSS vulnerabilities

2020-06-08 Thread Melinda Crane
r-is-handling-the-ajax (EntityREST or AtlasEntityStoreV2, maybe?) to blanket-catch HTML characters sounds safer. Hope this helps express my concerns. From, Melinda Crane On Sat, Jun 6, 2020 at 2:48 PM Madhan Neethiraj wrote: > Melinda, > > Thank you for reaching out to Apache At

Re: Seeking advice on Atlas XSS vulnerabilities

2020-06-08 Thread Melinda Crane
kind of HTML sanitization escaping into the whatever-is-handling-the-ajax (EntityREST or AtlasEntityStoreV2, maybe?) to blanket-catch HTML characters sounds safer. Hope this helps express my concerns. From, Melinda Crane On Mon, Jun 8, 2020 at 9:13 PM Melinda Crane wrote: > Dear Madhan, > &