Comments (3)
there is no vulnerability. closing.
from tagify.
hey @yairEO
If you're unable to view the report and wish to avert your gaze, then it's genuinely worth contemplating switching from the Tagify library to another.
from tagify.
sanitization should never be done in front-end, but only backend APIs.
I have been a believer in this for almost 20 years of designing highly complex web systems for large scale enterprises.
Tagify is only a GUI for editing an completely ordinary <input>
element's content.
It's just a design overlay.
You misunderstand how Tagify work if you think it has a scripting vulnerability, because in the end, Tagify is not, and never will be, a complete 100% solution for everything for a developer to drop and forget.
A developer still needs to submit a form or data to a server, same as was done for decades, and this process is unrelated to Tagify. It's in the developer's hands to do whatever they want/need with the above mentioned <input>
value, and if they are serious devs, they would already have sanitization in-place for every form and data submission to their backend -> database.
from tagify.
Related Issues (20)
- mix mode : pressing the enter key selects the first tag
- Callback when original tag data has loaded HOT 1
- Console warning on tag addition via enter key HOT 1
- Warning in Console: [Tagify]: Cannot find element in Tag template: . .tagify__tag-text HOT 1
- mix mode : pressing the down key at the end of line displays drop-down list
- Multiple init Tagify HOT 1
- Sprockets error in Rails 7 due to filename change in v4.25.0
- Intermittent error in setRangeAtStartEnd HOT 3
- prop-type error HOT 9
- Clicking outside doesn't close dropdown in select mode and tagX class is blank
- Options not filtered in select mode, userInput=true and tagX='' HOT 1
- in 4.26.2 value cannot be non-string in users-list example
- A double tag is created for delimiter when typed HOT 3
- react.tagify.jsx Failed to compile HOT 3
- Ignore an email address in the middle of an sentence HOT 1
- Tagify selct mode incorrect behavior HOT 7
- React className property supports only one class
- "Uncaught (in promise) TypeError: t is null" when pressing Tab key with empty input and dropdown is shown
- default highlighting of selected value in single-select mode in the dropdown HOT 4
- autoComplete.rightKey = true, mode = null (Default), two problems with the rightKey behavior
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from tagify.