Skip to content

Commit 094711b

Browse files
authored
Prototype CVE - update prototype.js (#429)
* Update 20_prototype.js for CVE-2020-27511 Prototype isn't maintained, but the CVE can be resolved. Taken from: prototypejs/prototype#349 * Update 20_prototype.js Change Version string * Make mis-matched single-quotes greedier
1 parent 6eb6e91 commit 094711b

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

ingredients/prototypejs/static/javascript/auto/20_prototype.js

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,7 @@
88

99
var Prototype = {
1010

11-
Version: '1.7.3',
11+
Version: '1.7.3.1-eprints',
1212

1313
Browser: (function(){
1414
var ua = navigator.userAgent;
@@ -621,7 +621,7 @@ Object.extend(String.prototype, (function() {
621621
}
622622

623623
function stripTags() {
624-
return this.replace(/<\w+(\s+("[^"]*"|'[^']*'|[^>])+)?(\/)?>|<\/\w+>/gi, '');
624+
return this.replace(/<\w+(\s+("[^"]*"|'[^']*'|[^>'"])+)?\s*("[^">]*|'[^'>]*)?(\/)?>|<\/\w+>/gi, '');
625625
}
626626

627627
function stripScripts() {

0 commit comments

Comments
 (0)