VDB
Sign up
MEDIUM

GHSA-j3gg-r6gp-95q2

XSS in HEEx class attributes

Quick fix

GHSA-j3gg-r6gp-95q2 — phoenix_html: upgrade to the fixed version with the command below.

mix deps.update phoenix_html

Details

The `class` attribute was not protected against XSS attacks when using HEEx.

Are you affected?

Enter the version of the package you're using.

Affected packages

Hex/phoenix_html
Introduced in: 0Fixed in: 3.0.4
Fixmix deps.update phoenix_html

References