TI-2023-10161 CVE-2023-24540 · GHSA-7qhm-5mxq-x7vp
Improper handling of JavaScript whitespace in html/template
Priority MEDIUM 52
Not all valid JavaScript whitespace characters are considered to be whitespace.
Network observability 1.3.0 for Openshift
Released 2023-06-28 · Red Hat rating Important · View on Red Hat →
Not all valid JavaScript whitespace characters are considered to be whitespace.
Templates containing actions in unquoted HTML attributes (e.g.
Angle brackets (<>) are not considered dangerous characters when inserted into CSS contexts.