components/Sidebar.js: assuage snyk's paranoia #2941
Conversation
It's not _totally_ wrong, someone could phish you a URL to sippy with something bogus in it, and if you then use this to file an issue about the page, then the phished url gets embedded in the issue. But that's just not much of an attack vector.
openshift-ci
bot
added
the
do-not-merge/work-in-progress
|
Skipping CI for Draft Pull Request. |
|
/test security |
openshift-ci
bot
added
the
approved
openshift-ci
bot
removed
the
do-not-merge/work-in-progress
|
/test e2e |
|
/lgtm |
|
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: sosiouxme, stbenjam The full list of commands accepted by this bot can be found here. The pull request process is described here
Needs approval from an approver in each of these files:
Approvers can indicate their approval by writing |
|
@sosiouxme: all tests passed! Full PR test history. Your PR dashboard. Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here. |
It's not totally wrong, someone could phish you a URL to sippy with something bogus in it, and if you then use this to file an issue about the page, then the phished url gets embedded in the issue. But that's just not much of an attack vector.