Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Staging #2132

Open
wants to merge 402 commits into
base: main
Choose a base branch
from

Merge pull request #2229 from CityOfPhiladelphia/announcements-endpoi…

f6f7be9
Select commit
Loading
Failed to load commit list.
Open

Staging #2132

Merge pull request #2229 from CityOfPhiladelphia/announcements-endpoi…
f6f7be9
Select commit
Loading
Failed to load commit list.
GitHub Advanced Security / CodeQL failed Jan 29, 2025 in 6s

72 new alerts including 2 critical severity security vulnerabilities

New alerts in code changed by this pull request

Security Alerts:

  • 2 critical
  • 57 high
  • 13 medium

Alerts not introduced by this pull request might have been detected because the code changes were too large.

See annotations below for details.

View all branch alerts.

Annotations

Check warning on line 443 in wp/wp-admin/js/edit-comments.js

See this annotation in the file changed.

Code scanning / CodeQL

DOM text reinterpreted as HTML Medium

DOM text
Loading
is reinterpreted as HTML without escaping meta-characters.

Check warning on line 220 in wp/wp-admin/js/inline-edit-post.js

See this annotation in the file changed.

Code scanning / CodeQL

DOM text reinterpreted as HTML Medium

DOM text
Loading
is reinterpreted as HTML without escaping meta-characters.

Check warning on line 1023 in wp/wp-admin/js/nav-menu.js

See this annotation in the file changed.

Code scanning / CodeQL

DOM text reinterpreted as HTML Medium

DOM text
Loading
is reinterpreted as HTML without escaping meta-characters.
DOM text
Loading
is reinterpreted as HTML without escaping meta-characters.
DOM text
Loading
is reinterpreted as HTML without escaping meta-characters.

Check warning on line 1426 in wp/wp-admin/js/nav-menu.js

See this annotation in the file changed.

Code scanning / CodeQL

DOM text reinterpreted as HTML Medium

DOM text
Loading
is reinterpreted as HTML without escaping meta-characters.
DOM text
Loading
is reinterpreted as HTML without escaping meta-characters.

Check warning on line 433 in wp/wp-admin/js/user-profile.js

See this annotation in the file changed.

Code scanning / CodeQL

DOM text reinterpreted as HTML Medium

DOM text
Loading
is reinterpreted as HTML without escaping meta-characters.

Check failure on line 457 in wp/wp-includes/js/jquery/jquery.form.js

See this annotation in the file changed.

Code scanning / CodeQL

Client-side cross-site scripting High

Cross-site scripting vulnerability due to
user-provided value
Loading
.

Check failure on line 834 in wp/wp-includes/js/jquery/jquery.form.js

See this annotation in the file changed.

Code scanning / CodeQL

XML internal entity expansion High

XML parsing depends on a
user-provided value
Loading
without guarding against uncontrolled entity expansion.

Check failure on line 917 in wp/wp-includes/js/jquery/jquery.form.js

See this annotation in the file changed.

Code scanning / CodeQL

XML external entity expansion Critical

XML parsing depends on a
user-provided value
Loading
without guarding against external entity expansion.

Check failure on line 917 in wp/wp-includes/js/jquery/jquery.form.js

See this annotation in the file changed.

Code scanning / CodeQL

XML internal entity expansion High

XML parsing depends on a
user-provided value
Loading
without guarding against uncontrolled entity expansion.

Check failure on line 920 in wp/wp-includes/js/jquery/jquery.form.js

See this annotation in the file changed.

Code scanning / CodeQL

XML internal entity expansion High

XML parsing depends on a
user-provided value
Loading
without guarding against uncontrolled entity expansion.

Check failure on line 920 in wp/wp-includes/js/jquery/jquery.form.js

See this annotation in the file changed.

Code scanning / CodeQL

Client-side cross-site scripting High

Cross-site scripting vulnerability due to
user-provided value
Loading
.

Check failure on line 927 in wp/wp-includes/js/jquery/jquery.form.js

See this annotation in the file changed.

Code scanning / CodeQL

Code injection Critical

This code execution depends on a
user-provided value
Loading
.

Check failure on line 1343 in wp/wp-includes/js/jquery/jquery.form.js

See this annotation in the file changed.

Code scanning / CodeQL

Client-side cross-site scripting High

Cross-site scripting vulnerability due to
user-provided value
Loading
.

Check failure on line 2652 in wp/wp-includes/js/jquery/jquery.js

See this annotation in the file changed.

Code scanning / CodeQL

Unvalidated dynamic method call High

Invocation of method with
user-controlled
Loading
name may dispatch to unexpected target and cause an exception.

Check failure on line 10175 in wp/wp-includes/js/jquery/jquery.js

See this annotation in the file changed.

Code scanning / CodeQL

Client-side cross-site scripting High

Cross-site scripting vulnerability due to
user-provided value
Loading
.

Check failure on line 444 in wp/wp-includes/js/jquery/ui/accordion.js

See this annotation in the file changed.

Code scanning / CodeQL

Client-side cross-site scripting High

Cross-site scripting vulnerability due to
user-provided value
Loading
.
Cross-site scripting vulnerability due to
user-provided value
Loading
.

Check failure on line 215 in wp/wp-includes/js/jquery/ui/autocomplete.js

See this annotation in the file changed.

Code scanning / CodeQL

Client-side cross-site scripting High

Cross-site scripting vulnerability due to
user-provided value
Loading
.

Check failure on line 207 in wp/wp-includes/js/jquery/ui/button.js

See this annotation in the file changed.

Code scanning / CodeQL

Client-side cross-site scripting High

Cross-site scripting vulnerability due to
user-provided value
Loading
.

Check failure on line 248 in wp/wp-includes/js/jquery/ui/checkboxradio.js

See this annotation in the file changed.

Code scanning / CodeQL

Client-side cross-site scripting High

Cross-site scripting vulnerability due to
user-provided value
Loading
.

Check failure on line 509 in wp/wp-includes/js/jquery/ui/core.js

See this annotation in the file changed.

Code scanning / CodeQL

Client-side cross-site scripting High

Cross-site scripting vulnerability due to
user-provided value
Loading
.

Check failure on line 1332 in wp/wp-includes/js/jquery/ui/core.js

See this annotation in the file changed.

Code scanning / CodeQL

Client-side cross-site scripting High

Cross-site scripting vulnerability due to
user-provided value
Loading
.
Cross-site scripting vulnerability due to
user-provided value
Loading
.

Check failure on line 1356 in wp/wp-includes/js/jquery/ui/core.js

See this annotation in the file changed.

Code scanning / CodeQL

Client-side cross-site scripting High

Cross-site scripting vulnerability due to
user-provided value
Loading
.
Cross-site scripting vulnerability due to
user-provided value
Loading
.

Check failure on line 1357 in wp/wp-includes/js/jquery/ui/core.js

See this annotation in the file changed.

Code scanning / CodeQL

Client-side cross-site scripting High

Cross-site scripting vulnerability due to
user-provided value
Loading
.
Cross-site scripting vulnerability due to
user-provided value
Loading
.

Check failure on line 1563 in wp/wp-includes/js/jquery/ui/core.js

See this annotation in the file changed.

Code scanning / CodeQL

Client-side cross-site scripting High

Cross-site scripting vulnerability due to
user-provided value
Loading
.
Cross-site scripting vulnerability due to
user-provided value
Loading
.

Check failure on line 1634 in wp/wp-includes/js/jquery/ui/core.js

See this annotation in the file changed.

Code scanning / CodeQL

Client-side cross-site scripting High

Cross-site scripting vulnerability due to
user-provided value
Loading
.
Cross-site scripting vulnerability due to
user-provided value
Loading
.