Incomplete multi-character sanitization - Github CodeQL scanning

Incomplete multi-character sanitization - Github CodeQL scanning

Bala_gcpBala_gcp Posts: 4Questions: 2Answers: 0

Hi,
I'm using version 1.11.4 (jquery.dataTables.js) in my code and no issues with functionalities but I'm getting issues from CodeQL (Github code scanning) reporting "Incomplete multi-character sanitization" at line number 14585,14586,1486, 5660,5903 and 14679.

I tried Github recommendations which breaks the functionalities, any idea how to pass these vulnerability issue

Thanks
Bala

Answers

  • allanallan Posts: 63,681Questions: 1Answers: 10,498 Site admin

    Have you tried newer versions of DataTables? 1.11.4 is quite old now. DataTables 2.0.0 is the current release and 1.13.10 is the latest of the legacy 1.x series.

    I'm not familiar with the warning you note, so any additional information you can link to about it would be useful.

    Allan

  • Bala_gcpBala_gcp Posts: 4Questions: 2Answers: 0

    Thanks Allan, let me try the latest version

  • Bala_gcpBala_gcp Posts: 4Questions: 2Answers: 0

    Hi Allan, I tried latest version 2.0.0 and found lot of differences in the UI (attached screenshots for reference)

  • allanallan Posts: 63,681Questions: 1Answers: 10,498 Site admin

    That is correct and expected. See this example.

    Allan

Sign In or Register to comment.