QT/superset2
1
0
Fork 0
mirror of https://github.com/apache/superset.git synced 2026-07-23 23:25:45 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix: sanitize URL sinks and trim sensitive log fields (#40546)

Browse Source 
Co-authored-by: Claude Code <noreply@anthropic.com>
This commit is contained in:
Evan Rusackas
2026-06-02 11:52:02 -07:00
committed by GitHub
parent b97d3ef520
commit 00dd31494d
13 changed files with 65 additions and 39 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
superset-frontend/src/SqlLab/components/SaveDatasetModal/index.tsx
View File

@@ -16,7 +16,7 @@
* specific language governing permissions and limitations
* under the License.
*/
import { sanitizeUrl } from '@braintree/sanitize-url';
import { useCallback, useState, FormEvent } from 'react';
import { ModalTitleWithIcon } from 'src/components/ModalTitleWithIcon';
import { Radio, RadioChangeEvent } from '@superset-ui/core/components/Radio';
@@ -245,9 +245,9 @@ export const SaveDatasetModal = ({
const createWindow = (url: string) => {
if (openWindow) {
window.open(url, '_blank', 'noreferrer');
window.open(sanitizeUrl(url), '_blank', 'noreferrer');
} else {
window.location.href = url;
window.location.href = sanitizeUrl(url);
}
};
const formDataWithDefaults = {