Skip to content

Commit ffff23f

Browse files
Azizah2023Azizah2023
committed
Revert auto-formatting changes caused by lint issues
1 parent c2a0efd commit ffff23f

File tree

2 files changed

+61
-178
lines changed

2 files changed

+61
-178
lines changed

‎src/sections/Community/Handbook/security-vulnerabilities.js‎

Lines changed: 59 additions & 175 deletions
Original file line numberDiff line numberDiff line change
@@ -23,56 +23,41 @@ const SecurityVulnerabilitiesPage = () => {
2323
<div className="page-section">
2424
<Container>
2525
<div className="content">
26-
<h2 className="heading-top">Reporting a vulnerability</h2>
27-
<br />
28-
<p>
29-
We are very grateful to the security researchers and users that
30-
report security vulnerabilities. We investigate each report
31-
thoroughly.
32-
</p>
33-
<p>
34-
To make a report, send an email to the private{" "}
35-
<a href="mailto:security-vulns-reports@layer5.io">
36-
security-vulns-reports@layer5.io
37-
</a>{" "}
38-
mailing list with the vulnerability details. For normal product
39-
bugs unrelated to latent security vulnerabilities, please head to
40-
the appropriate repository and submit a{" "}
41-
<a href="https://github.com/layer5io/layer5/issues/new/choose">
42-
new issue
43-
</a>
44-
.
45-
</p>
26+
<h2 className="heading-top">Reporting a vulnerability</h2><br />
27+
<p>We are very grateful to the security researchers and users that report security vulnerabilities. We investigate each report thoroughly.</p>
28+
<p>To make a report, send an email to the private <a href="mailto:security-vulns-reports@layer5.io">security-vulns-reports@layer5.io</a> mailing list with the vulnerability details. For normal product bugs unrelated to latent security vulnerabilities, please head to the appropriate repository and submit a <a href="https://github.com/layer5io/layer5/issues/new/choose">new issue</a> .</p>
4629
<p>Note that the Layer5 community spans six GitHub organizations:</p>
47-
4830
<ul className="project-org-list">
4931
<li>
5032
<a href="https://github.com/layer5io">
51-
<img src={layer5icon} alt="layer5 icon" />
33+
<img
34+
src={layer5icon}
35+
alt="layer5 icon"
36+
/>
5237
&nbsp; Layer5
53-
</a>{" "}
54-
- established projects like GetNighthawk, community with
55-
MeshMates, a catch-all org.
38+
</a>
39+
- established projects like GetNighthawk, community with MeshMates, a catch-all org.
5640
</li>
5741

5842
<li>
5943
<a href="https://github.com/meshery">
60-
<img src={meshery} alt="meshery icon" />
44+
<img
45+
src={meshery}
46+
alt="meshery icon"
47+
/>
6148
&nbsp; Meshery
62-
</a>{" "}
63-
- Meshery and its components Meshery Operator
49+
</a>
50+
- Meshery and its components Meshery Operator
6451
<img
6552
src={MesheryOperator}
6653
alt="Meshery Operator logo"
6754
style={{ marginLeft: ".3rem" }}
68-
/>{" "}
69-
and MeshSync
55+
/> and MeshSync
7056
<img
7157
src={MeshSync}
7258
alt="mesh sync icon"
7359
style={{ marginLeft: ".3rem" }}
74-
/>
75-
.
60+
/>.
7661
</li>
7762

7863
<li>
@@ -82,68 +67,52 @@ const SecurityVulnerabilitiesPage = () => {
8267
alt="cloud native performance logo"
8368
/>
8469
&nbsp; Cloud Native Performance
85-
</a>{" "}
86-
- Cloud Native Performance specification and site.
70+
</a>
71+
- Cloud Native Performance specification and site.
8772
</li>
88-
8973
<li>
9074
<a href="https://github.com/service-mesh-patterns">
9175
<img
9276
src={servicemeshpattern}
9377
alt="cloud native patterns logo"
9478
/>
9579
&nbsp; Cloud Native Patterns
96-
</a>{" "}
97-
- a collection of curated patterns of cloud native use cases
98-
compatible with Meshery.
80+
</a>
81+
- a collection of curated patterns of cloud native use cases compatible with Meshery.
9982
</li>
100-
10183
<li>
10284
<a href="https://github.com/layer5labs">
103-
<img src={layer5icon} alt="Layer5 logo" />
85+
<img
86+
src={layer5icon}
87+
alt="Layer5 logo"
88+
/>
10489
&nbsp; Layer5 Labs
105-
</a>{" "}
106-
- emerging projects and Meshery extensions, like
90+
</a>
91+
- emerging projects and Meshery extensions, like
10792
<img
10893
src={Kanvas}
10994
alt="Kanvas logo"
11095
style={{ marginLeft: ".3rem" }}
111-
/>
112-
Kanvas.
96+
/>Kanvas.
11397
</li>
114-
11598
<li>
11699
<a href="https://github.com/meshery-extensions">
117100
<img
118101
src={mesheryextension}
119102
alt="meshery extension icon"
120103
/>
121104
&nbsp; Meshery Extensions
122-
</a>{" "}
123-
- plugins or add-ons providing extra functionalities that can be
124-
used to customize, extend and integrate with other tools and
125-
services.
105+
</a>
106+
- plugins or add-ons providing extra functionalities that can be used to customize, extend and integrate with other tools and services.
126107
</li>
127108
</ul>
128-
129-
<p>
130-
You can find the list of all the Layer5 project repositories{" "}
131-
<a href="https://layer5.io/community/handbook/repository-overview">
132-
here
133-
</a>
134-
</p>
135-
109+
<p>You can find the list of all the Layer5 project repositories <a href="https://layer5.io/community/handbook/repository-overview">here</a></p>
136110
<h3>When to report a security vulnerability?</h3>
137111
<p>Send us a report whenever you:</p>
138112
<ul>
139113
<li>Think Layer5 projects have a potential security vulnerability.</li>
140-
<li>
141-
Are unsure whether or how a vulnerability affects the project.
142-
</li>
143-
<li>
144-
Think a vulnerability is present in another project that Layer5
145-
projects depends on (Docker for example).
146-
</li>
114+
<li>Are unsure whether or how a vulnerability affects the project.</li>
115+
<li>Think a vulnerability is present in another project that Layer5 projects depends on (Docker for example).</li>
147116
</ul>
148117

149118
<h3>When not to report a security vulnerability?</h3>
@@ -153,152 +122,67 @@ const SecurityVulnerabilitiesPage = () => {
153122
<li>You need help applying security related updates.</li>
154123
<li>Your issue is not security related.</li>
155124
</ul>
156-
<p>
157-
Instead, join the community{" "}
158-
<a href="https://slack.layer5.io/">Slack</a> and ask questions.
159-
</p>
125+
<p>Instead, join the community <a href="https://slack.layer5.io/">Slack</a> and ask questions.</p>
160126

161127
<h3>Evaluation</h3>
162-
<p>
163-
The Layer5 team acknowledges and analyzes each vulnerability
164-
report within 10 working days.
165-
</p>
128+
<p>The Layer5 team acknowledges and analyzes each vulnerability report within 10 working days.</p>
166129

167-
<p>
168-
Any vulnerability information you share with the Layer5 team stays
169-
within the respective Layer5 project. We don’t disseminate the
170-
information to other projects. We only share the information as
171-
needed to fix the issue.
172-
</p>
130+
<p>Any vulnerability information you share with the Layer5 team stays within the respective Layer5 project. We don’t disseminate the information to other projects. We only share the information as needed to fix the issue.</p>
173131

174-
<p>
175-
We keep the reporter updated as the status of the security issue
176-
is addressed.
177-
</p>
132+
<p>We keep the reporter updated as the status of the security issue is addressed.</p>
178133

179134
<h3>Fixing the issue</h3>
180-
<p>
181-
Once a security vulnerability has been fully characterized, a fix
182-
is developed by the Layer5 team. The development and testing for
183-
the fix happens in a private GitHub repository in order to prevent
184-
premature disclosure of the vulnerability.
185-
</p>
135+
<p>Once a security vulnerability has been fully characterized, a fix is developed by the Layer5 team. The development and testing for the fix happens in a private GitHub repository in order to prevent premature disclosure of the vulnerability.</p>
186136

187137
<h3>Early disclosures</h3>
188-
<p>
189-
The Layer5 project maintains a mailing list for private early
190-
disclosure of security vulnerabilities. The list is used to
191-
provide actionable information to close Layer5 partners. The list
192-
is not intended for individuals to find out about security issues.
193-
</p>
138+
<p>The Layer5 project maintains a mailing list for private early disclosure of security vulnerabilities. The list is used to provide actionable information to close Layer5 partners. The list is not intended for individuals to find out about security issues.</p>
194139

195140
<h3>Public disclosures</h3>
196-
<p>
197-
On the day chosen for public disclosure, a sequence of activities
198-
takes place as quickly as possible:
199-
</p>
141+
<p>On the day chosen for public disclosure, a sequence of activities takes place as quickly as possible:</p>
200142
<ul>
201-
<li>
202-
Changes are merged from the private GitHub repository holding
203-
the fix into the appropriate set of public branches.
204-
</li>
205-
<li>
206-
Layer5 team ensures all necessary binaries are promptly built
207-
and published.
208-
</li>
209-
<li>
210-
Once the binaries are available, an announcement is sent out on
211-
the following channels:
143+
<li>Changes are merged from the private GitHub repository holding the fix into the appropriate set of public branches.</li>
144+
<li>Layer5 team ensures all necessary binaries are promptly built and published.</li>
145+
<li>Once the binaries are available, an announcement is sent out on the following channels:
212146
<ul>
213-
<li>
214-
The{" "}
215-
<a href="https://layer5.io/blog">Layer5 blog</a>
216-
</li>
217-
<li>
218-
The{" "}
219-
<a href="https://twitter.com/layer5">Layer5 Twitter feed</a>
220-
</li>
221-
<li>
222-
The{" "}
223-
<a href="https://layer5io.slack.com/archives/CSF3PSZT9">
224-
#announcements
225-
</a>{" "}
226-
channel on community{" "}
227-
<a href="https://slack.layer5.io/">Slack</a>
228-
</li>
147+
<li>The <a href="https://layer5.io/blog">Layer5 blog</a></li>
148+
<li>The <a href="https://twitter.com/layer5">Layer5 Twitter feed</a></li>
149+
<li>The <a href="https://layer5io.slack.com/archives/CSF3PSZT9">#announcements</a> channel on community <a href="https://slack.layer5.io/">Slack</a></li>
229150
</ul>
230151
</li>
231152
</ul>
232-
<p>
233-
As much as possible this announcement will be actionable, and
234-
include any mitigating steps customers can take prior to upgrading
235-
to a fixed version.
236-
</p>
153+
<p>As much as possible this announcement will be actionable, and include any mitigating steps customers can take prior to upgrading to a fixed version.</p>
237154

238155
<h2>List of Announced Vulnerabilities:</h2>
239156

240157
<div className="table-container">
241158
<table>
242159
<thead>
243160
<tr>
244-
<th>
245-
<b>DATE ANNOUNCED</b>
246-
</th>
247-
<th>
248-
<b>CVE ID</b>
249-
</th>
250-
<th>
251-
<b>DESCRIPTION</b>
252-
</th>
253-
<th>
254-
<b>AFFECTED COMPONENT</b>
255-
</th>
256-
<th>
257-
<b>VULNERABLE VERSION</b>
258-
</th>
259-
<th>
260-
<b>PATCHED VERSION</b>
261-
</th>
262-
<th>
263-
<b>FIX DETAILS</b>
264-
</th>
265-
<th>
266-
<b>LINKS</b>
267-
</th>
161+
<th><b>DATE ANNOUNCED</b></th>
162+
<th><b>CVE ID</b></th>
163+
<th><b>DESCRIPTION</b></th>
164+
<th><b>AFFECTED COMPONENT</b></th>
165+
<th><b>VULNERABLE VERSION</b></th>
166+
<th><b>PATCHED VERSION</b></th>
167+
<th><b>FIX DETAILS</b></th>
168+
<th><b>LINKS</b></th>
268169
</tr>
269170
</thead>
270171
<tbody>
271172
<tr>
272173
<td>2021-04-28</td>
273174
<td>CVE-2021-31856</td>
274-
<td>
275-
A SQL Injection vulnerability in the REST API in Layer5
276-
Meshery 0.5.2 allows an attacker to execute arbitrary SQL
277-
commands via the /experimental/patternfiles endpoint
278-
(order parameter in GetMesheryPatterns in
279-
models/meshery_pattern_persister.go).
280-
</td>
175+
<td>A SQL Injection vulnerability in the REST API in Layer5 Meshery 0.5.2 allows an attacker to execute arbitrary SQL commands via the /experimental/patternfiles endpoint (order parameter in GetMesheryPatterns in models/meshery_pattern_persister.go).</td>
281176
<td>REST API</td>
282177
<td>v0.5.2</td>
283178
<td>v0.5.3</td>
284-
<td>
285-
<a href="https://github.com/layer5io/meshery/pull/2745">
286-
fix pull
287-
</a>
288-
</td>
289-
<td>
290-
<a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-31856">
291-
mitre
292-
</a>
293-
,{" "}
294-
<a href="https://github.com/ssst0n3/CVE-2021-31856">
295-
details
296-
</a>
297-
</td>
179+
<td><a href="https://github.com/layer5io/meshery/pull/2745">fix pull</a></td>
180+
<td><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-31856">mitre</a>, <a href="https://github.com/ssst0n3/CVE-2021-31856">details</a></td>
298181
</tr>
299182
</tbody>
300183
</table>
301184
</div>
185+
302186
</div>
303187
</Container>
304188
</div>

‎src/sections/Community/Web-based-from/index.js‎

Lines changed: 2 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -29,13 +29,12 @@ const validatePictureUrl = (value) => {
2929
new URL(value);
3030
const allowedImageExtensions = ["jpg", "jpeg", "png", "webp", "svg", "gif"];
3131
const extension = value.split(".").pop().toLowerCase();
32-
3332
if (!allowedImageExtensions.includes(extension)) {
34-
return "URL must point to an image file (jpg, jpeg, png, svg, webp or gif).";
33+
error = "URL must point to an image file (jpg, jpeg, png, svg, webp or gif).";
3534
}
3635
} catch (err) {
3736
console.error("Error in validatePictureUrl:", err);
38-
return "Please enter a URL to an image file.";
37+
error = "Please enter a URL to an image file.";
3938
}
4039
}
4140
}

0 commit comments

Comments
 (0)