starred/audiobookshelf
1
0
Fork 0
mirror of https://github.com/advplyr/audiobookshelf.git synced 2026-05-30 23:40:40 +02:00
Code Issues 1.0k Packages Projects Releases 10 Wiki Activity

[PR #597] [CLOSED] Address XSS vulnerability #3381

New Issue
Closed
opened 2026-04-25 00:15:25 +02:00 by adam · 0 comments
adam commented 2026-04-25 00:15:25 +02:00
Owner
Copy Link
Copy Source

📋 Pull Request Information

Original PR: https://github.com/advplyr/audiobookshelf/pull/597
Author: @jflattery
Created: 5/16/2022
Status: ❌ Closed

Base: master ← Head: master

📝 Commits (2)

  • 2a55c52 Address XSS vulnerability
  • 725aad0 Revert "Address XSS vulnerability"

📄 Description

Unsanitized input from an HTTP parameter flows into send, where it is used to render an HTML page returned to the user. This may result in a Cross-Site Scripting attack (XSS). Read more

🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/advplyr/audiobookshelf/pull/597 **Author:** [@jflattery](https://github.com/jflattery) **Created:** 5/16/2022 **Status:** ❌ Closed **Base:** `master` ← **Head:** `master` --- ### 📝 Commits (2) - [`2a55c52`](https://github.com/advplyr/audiobookshelf/commit/2a55c525279bd3625a188972133c9273c0c15504) Address XSS vulnerability - [`725aad0`](https://github.com/advplyr/audiobookshelf/commit/725aad0a25851deccc416d778e1ad96d16d080f6) Revert "Address XSS vulnerability" ### 📄 Description Unsanitized input from an HTTP parameter flows into send, where it is used to render an HTML page returned to the user. This may result in a Cross-Site Scripting attack (XSS). [Read more](https://learn.snyk.io/lessons/xss/javascript/) --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
adam added the pull-request label 2026-04-25 00:15:25 +02:00
adam closed this issue 2026-04-25 00:15:26 +02:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
authentication
backlog
bug
chapter editor
config-issue
ebooks
encoding/embedding
enhancement
help wanted
listening sessions & progress
planned
possible plugin
progress sync
pull-request
Mirrored from GitHub Pull Request
 sorting/filtering/searching
unable to reproduce
upload
users & permissions
waiting
No Label pull-request
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
adam (Adam Melkus)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/audiobookshelf#3381
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?