mirror of
				https://github.com/mermaid-js/mermaid.git
				synced 2025-10-25 17:04:19 +02:00 
			
		
		
		
	Merge branch 'sidv/typescript' of https://github.com/mermaid-js/mermaid into sidv/typescript
* 'sidv/typescript' of https://github.com/mermaid-js/mermaid: Update src/config.ts
This commit is contained in:
		| @@ -151,7 +151,7 @@ export const getConfig = (): MermaidConfig => { | ||||
|  */ | ||||
| export const sanitize = (options: any) => { | ||||
|   // Checking that options are not in the list of excluded options | ||||
|   siteConfig.secure?.forEach((key) => { | ||||
|   ['secure', ...(siteConfig.secure ?? [])].forEach((key) => { | ||||
|     if (typeof options[key] !== 'undefined') { | ||||
|       // DO NOT attempt to print options[key] within `${}` as a malicious script | ||||
|       // can exploit the logger's attempt to stringify the value and execute arbitrary code | ||||
|   | ||||
		Reference in New Issue
	
	Block a user
	 Sidharth Vinod
					Sidharth Vinod