admin/e-ticket
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Use Set for ALLOWED_TAGS, ignore javascript:S1874 for execCommand in SonarQube

Browse Source 
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
Serreau Jovann
2026-03-20 16:43:52 +01:00
parent d1e3de33df
commit ebdb3bbf5d
2 changed files with 6 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
assets/modules/editor.js
View File

@@ -10,10 +10,10 @@ const TOOLBAR_ACTIONS = [
{ command: 'removeFormat', icon: '&#10060;', title: 'Supprimer le formatage' },
]
const ALLOWED_TAGS = [
const ALLOWED_TAGS = new Set([
'p', 'br', 'b', 'strong', 'i', 'em', 'u',
'ul', 'li',
]
])
export function sanitizeHtml(html) {
const container = document.createElement('div')
@@ -33,7 +33,7 @@ function sanitizeNode(node) {
fragment.appendChild(document.createTextNode(child.textContent))
} else if (child.nodeType === Node.ELEMENT_NODE) {
const tagName = child.tagName.toLowerCase()
if (ALLOWED_TAGS.includes(tagName)) {
if (ALLOWED_TAGS.has(tagName)) {
const el = document.createElement(tagName)
el.appendChild(sanitizeNode(child))
fragment.appendChild(el)

4
sonar-project.properties
View File

@@ -13,6 +13,8 @@ sonar.eslint.reportPaths=eslint-report.json
sonar.docker.hadolint.reportPaths=hadolint-dev.json,hadolint-prod.json
sonar.dependencyCheck.jsonReportPath=dependency-check-report.json
sonar.dependencyCheck.htmlReportPath=dependency-check-report.html
sonar.issue.ignore.multicriteria=e1
sonar.issue.ignore.multicriteria=e1,e2
sonar.issue.ignore.multicriteria.e1.ruleKey=css:S4662
sonar.issue.ignore.multicriteria.e1.resourceKey=assets/**
sonar.issue.ignore.multicriteria.e2.ruleKey=javascript:S1874
sonar.issue.ignore.multicriteria.e2.resourceKey=assets/modules/editor.js