Skip to content

Core: Hardens widget structure injection detection against CDATA - #2730

Merged
Daverball merged 1 commit into
masterfrom
ogc-3541-widget-cdata-injection
Oct 7, 2026
Merged

Daverball merged 1 commit into
masterfrom
ogc-3541-widget-cdata-injection

Conversation

@Daverball

@Daverball Daverball commented Oct 7, 2026 •

Copy link
Copy Markdown
Member

Commit message

Core: Hardens widget structure injection detection against CDATA

TYPE: Bugfix
LINK: OGC-3541

Checklist

  • I have performed a self-review of my code
  • I have added tests for my changes/features

@linear

linear Bot commented Oct 7, 2026

Copy link
Copy Markdown

OGC-3541

@codecov

codecov Bot commented Oct 7, 2026 •

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 85.71%. Comparing base (c012c78) to head (82bb5d3).
⚠️ Report is 1 commits behind head on master.
✅ All tests successful. No failed tests found.

Additional details and impacted files
Files with missing lines Coverage Δ
src/onegov/core/widgets.py 100.00% <100.00%> (ø)

... and 1 file with indirect coverage changes


Continue to review full report in Codecov by Harness.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update c012c78...82bb5d3. Read the comment docs.

🚀 New features to boost your workflow:
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@Daverball
Daverball merged commit 43ed0ea into master Oct 7, 2026
24 of 25 checks passed
@Daverball
Daverball deleted the ogc-3541-widget-cdata-injection branch October 7, 2026 14:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant