Skip to content

Commit c85d3d1

Browse files
committed
MC-15311: [Sec] PageBuilder XSS Injection Possible Through Block on HTML Code Content Type For CSS Classes Attribute & in TinyMCE
Fix static issues
1 parent ebcc769 commit c85d3d1

File tree

2 files changed

+5
-1
lines changed

2 files changed

+5
-1
lines changed

app/code/Magento/PageBuilder/Plugin/Filter/TemplatePlugin.php

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -112,7 +112,7 @@ public function afterFilter(\Magento\Framework\Filter\Template $subject, string
112112
*
113113
* @param \Magento\Framework\Filter\Template $subject
114114
* @param \Closure $proceed
115-
* @param $construction
115+
* @param string[] $construction
116116
* @return string
117117
*/
118118
public function aroundCustomvarDirective(

dev/tests/integration/testsuite/Magento/PageBuilder/_files/custom_variable_xss.php

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,8 @@
11
<?php
2+
/**
3+
* Copyright © Magento, Inc. All rights reserved.
4+
* See COPYING.txt for license details.
5+
*/
26

37
$this->objectManager = \Magento\TestFramework\Helper\Bootstrap::getObjectManager();
48

0 commit comments

Comments
 (0)