1. Feedback
  2. Angular
  3. 51901

Welcome to the Angular feedback portal. We’re happy you’re here! If you have feedback on how to improve the Angular, we’d love to hear it!

  • Check out the features or bugs others have reported and vote on your favorites. Feedback will be prioritized based on popularity.
  • If you have feedback that’s not listed yet, submit your own.

Thanks for joining our community and helping improve Syncfusion products!

0
Votes

XSS issue when utilizing the highlightSearch feature and setting the filterquery parameter without a value

XSS issue when utilizing the highlightSearch feature and setting the filterstring parameter without a value. issue reproduced in autocomplete also

Sample: 

https://stackblitz.com/edit/github-uii5kx?file=src%2Fapp.component.ts

 

Replication Procedure:

  • Run the sample
  • open the popup
  • you can see the issue

Expected Behavior: Xss issue should not occur

Actual Behavior: XSS issue when utilizing the highlightSearch feature and setting the filterquery parameter without a value.