DataTables
Advanced interaction
features for your tables.
Editor
Comprehensive editing
library for DataTables.
Manual
Download
≡ Show site navigation

Incomplete multi-character sanitization - Github CodeQL scanning

Incomplete multi-character sanitization - Github CodeQL scanning

Bala_gcpBala_gcp Posts: 4Questions: 2Answers: 0
in Free community support

Hi,
I'm using version 1.11.4 (jquery.dataTables.js) in my code and no issues with functionalities but I'm getting issues from CodeQL (Github code scanning) reporting "Incomplete multi-character sanitization" at line number 14585,14586,1486, 5660,5903 and 14679.

I tried Github recommendations which breaks the functionalities, any idea how to pass these vulnerability issue

Thanks
Bala

Answers

  • allanallan Posts: 61,759Questions: 1Answers: 10,111 Site admin

    Have you tried newer versions of DataTables? 1.11.4 is quite old now. DataTables 2.0.0 is the current release and 1.13.10 is the latest of the legacy 1.x series.

    I'm not familiar with the warning you note, so any additional information you can link to about it would be useful.

    Allan

  • Bala_gcpBala_gcp Posts: 4Questions: 2Answers: 0

    Thanks Allan, let me try the latest version

  • Bala_gcpBala_gcp Posts: 4Questions: 2Answers: 0

    Hi Allan, I tried latest version 2.0.0 and found lot of differences in the UI (attached screenshots for reference)

  • allanallan Posts: 61,759Questions: 1Answers: 10,111 Site admin

    That is correct and expected. See this example.

    Allan

Sign In or Register to comment.

DataTables

DataTables designed and created by SpryMedia Ltd.
© 2007-2023 MIT licensed. Privacy policy. Supporters.
SpryMedia Ltd is registered in Scotland, company no. SC456502.