Skip to content

Commit aedbceb

Browse files
SomeMWDevalistair3149
authored andcommitted
fix(SECURITY): 🐛 🔒️ sanitize search result descriptions in old search module
The descriptions from TextExtracts, Description2, Wikibase, and ShortDescription can contain unsanitized user input. This fixes a stored XSS vulnerability. CVE-2025-53368
1 parent da5f0d0 commit aedbceb

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

resources/skins.citizen.search/templates/TypeaheadListItem.mustache

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@
1515
<div class="citizen-typeahead-list-item-text">
1616
{{#text}}{{.}}{{/text}}
1717
{{#title}}<div class="citizen-typeahead-list-item-title">{{{.}}}</div>{{/title}}
18-
{{#description}}<div class="citizen-typeahead-list-item-description">{{{.}}}</div>{{/description}}
18+
{{#description}}<div class="citizen-typeahead-list-item-description">{{.}}</div>{{/description}}
1919
</div>
2020
{{#html-end}}<div class="citizen-typeahead-list-item-end">{{{.}}}</div>{{/html-end}}
2121
</a>

0 commit comments

Comments
 (0)