Skip to content

fix: Stored XSS filter bypass via Content-Type MIME parameter and missing XML extension blocklist entries (GHSA-42ph-pf9q-cr72) #1211

fix: Stored XSS filter bypass via Content-Type MIME parameter and missing XML extension blocklist entries (GHSA-42ph-pf9q-cr72)

fix: Stored XSS filter bypass via Content-Type MIME parameter and missing XML extension blocklist entries (GHSA-42ph-pf9q-cr72) #1211

Triggered via pull request March 13, 2026 14:02
Status Failure
Total duration 16m 41s
Artifacts 2

ci-performance.yml

on: pull_request
Fit to window
Zoom out
Zoom in

Annotations

1 error and 1 warning
Benchmarks
Process completed with exit code 1.
Benchmarks
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@v4, actions/setup-node@v4, actions/upload-artifact@v4. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

Artifacts

Produced during runtime
Name Size Digest
baseline-benchmark Expired
2.81 KB
sha256:6ed49d53c457ea3597b81cf98d7497f2d6ff09e4fd6d7c1aa95c09364622fbd5
pr-benchmark Expired
2.76 KB
sha256:8c6d258fa58d37f01f53dd0265f86510a97ef55425fa5f0d20d17c2bc03cbaec