Skip to content

Lint fixes

d0550db
Select commit
Loading
Failed to load commit list.
Merged

Embed and Marquee page blocks and icons for grid blocks #609

Lint fixes
d0550db
Select commit
Loading
Failed to load commit list.
GitHub Advanced Security / CodeQL succeeded Aug 11, 2025 in 6s

2 new alerts including 2 medium severity security vulnerabilities

New alerts in code changed by this pull request

Security Alerts:

  • 2 medium

See annotations below for details.

View all branch alerts.

Annotations

Check failure on line 28 in packages/page-blocks/src/blocks/embed/admin-widget.tsx

See this annotation in the file changed.

Code scanning / CodeQL

Incomplete URL substring sanitization High

'
https://www.youtube.com
' may be followed by an arbitrary host name.

Check failure on line 29 in packages/page-blocks/src/blocks/embed/admin-widget.tsx

See this annotation in the file changed.

Code scanning / CodeQL

Incomplete URL substring sanitization High

'
https://www.youtube-nocookie.com
' may be followed by an arbitrary host name.

Check failure on line 30 in packages/page-blocks/src/blocks/embed/admin-widget.tsx

See this annotation in the file changed.

Code scanning / CodeQL

Incomplete URL substring sanitization High

'
https://youtube.com
' may be followed by an arbitrary host name.

Check failure on line 31 in packages/page-blocks/src/blocks/embed/admin-widget.tsx

See this annotation in the file changed.

Code scanning / CodeQL

Incomplete URL substring sanitization High

'
https://youtube-nocookie.com
' may be followed by an arbitrary host name.

Check failure on line 32 in packages/page-blocks/src/blocks/embed/admin-widget.tsx

See this annotation in the file changed.

Code scanning / CodeQL

Incomplete URL substring sanitization High

'
https://youtu.be
' may be followed by an arbitrary host name.

Check failure on line 45 in packages/page-blocks/src/blocks/embed/admin-widget.tsx

See this annotation in the file changed.

Code scanning / CodeQL

Incomplete URL substring sanitization High

'
https://vimeo.com
' may be followed by an arbitrary host name.

Check failure on line 46 in packages/page-blocks/src/blocks/embed/admin-widget.tsx

See this annotation in the file changed.

Code scanning / CodeQL

Incomplete URL substring sanitization High

'
https://player.vimeo.com
' may be followed by an arbitrary host name.

Check warning on line 107 in packages/page-blocks/src/blocks/grid/admin-widget/svg-editor.tsx

See this annotation in the file changed.

Code scanning / CodeQL

DOM text reinterpreted as HTML High

DOM text
is reinterpreted as HTML without escaping meta-characters.

Check warning on line 70 in packages/page-blocks/src/blocks/marquee/admin-widget/item-editor.tsx

See this annotation in the file changed.

Code scanning / CodeQL

DOM text reinterpreted as HTML High

DOM text
is reinterpreted as HTML without escaping meta-characters.