Fix XSS Vulnerabilities in dangerouslySetInnerHTML Usage (#1686)#1690
Merged
Annotations
2 errors and 4 warnings
|
HttpError: Resource not accessible by integration
at /home/runner/work/_actions/release-drafter/release-drafter/v6/dist/index.js:7146:21
at process.processTicksAndRejections (node:internal/process/task_queues:95:5)
at async Job.doExecute (/home/runner/work/_actions/release-drafter/release-drafter/v6/dist/index.js:61885:18)
{
name: 'AggregateError',
event: {
id: '22381118614',
name: 'pull_request',
payload: {
action: 'synchronize',
after: '10a70dc252db993cdb456844632f0c0dd2d2b6c1',
before: '8e818b1c560fb78a10fa569c598ad6aa043b039b',
number: 1690,
organization: {
avatar_url: 'https://avatars.githubusercontent.com/u/106463282?v=4',
description: 'An Opensource platform for React developers to learn, create and share ReactJS Projects. ',
events_url: 'https://api.github.com/orgs/reactplay/events',
hooks_url: 'https://api.github.com/orgs/reactplay/hooks',
id: 106463282,
issues_url: 'https://api.github.com/orgs/reactplay/issues',
login: 'reactplay',
members_url: 'https://api.github.com/orgs/reactplay/members{/member}',
node_id: 'O_kgDOBliAMg',
public_members_url: 'https://api.github.com/orgs/reactplay/public_members{/member}',
repos_url: 'https://api.github.com/orgs/reactplay/repos',
url: 'https://api.github.com/orgs/reactplay'
},
pull_request: {
_links: {
comments: {
href: 'https://api.github.com/repos/reactplay/react-play/issues/1690/comments'
},
commits: {
href: 'https://api.github.com/repos/reactplay/react-play/pulls/1690/commits'
},
html: { href: 'https://github.com/reactplay/react-play/pull/1690' },
issue: {
href: 'https://api.github.com/repos/reactplay/react-play/issues/1690'
},
review_comment: {
href: 'https://api.github.com/repos/reactplay/react-play/pulls/comments{/number}'
},
review_comments: {
href: 'https://api.github.com/repos/reactplay/react-play/pulls/1690/comments'
},
self: {
href: 'https://api.github.com/repos/reactplay/react-play/pulls/1690'
},
statuses: {
href: 'https://api.github.com/repos/reactplay/react-play/statuses/10a70dc252db993cdb456844632f0c0dd2d2b6c1'
}
},
active_lock_reason: null,
additions: 38,
assignee: {
avatar_url: 'https://avatars.githubusercontent.com/u/178690510?v=4',
events_url: 'https://api.github.com/users/Suvam-paul145/events{/privacy}',
followers_url: 'https://api.github.com/users/Suvam-paul145/followers',
following_url: 'https://api.github.com/users/Suvam-paul145/following{/other_user}',
gists_url: 'https://api.github.com/users/Suvam-paul145/gists{/gist_id}',
gravatar_id: '',
html_url: 'https://github.com/Suvam-paul145',
id: 178690510,
login: 'Suvam-paul145',
node_id: 'U_kgDOCqaZzg',
organizations_url: 'https://api.github.com/users/Suvam-paul145/orgs',
received_events_url: 'https://api.github.com/users/Suvam-paul145/received_events',
repos_url: 'https://api.github.com/users/Suvam-paul145/repos',
site_admin: false,
starred_url: 'https://api.github.com/users/Suvam-paul145/starred{/owner}{/repo}',
subscriptions_url: 'https://api.github.com/users/Suvam-paul145/subscriptions',
type: 'User',
url: 'https://api.github.com/users/Suvam-paul145',
user_view_type: 'public'
},
assignees: [
{
avatar_url: 'https://avatars.githubusercontent.com/u/178690510?v=4',
events_url: 'https://api.github.com/users/Suvam-paul145/events{/privacy}',
followers_url: 'https://api.github.com/users/Suvam-paul145/followers',
following_url: 'https://api.github.com/users/Suvam-paul145/following{/other_user}',
|
|
Resource not accessible by integration
{
name: 'HttpError',
id: '22381118614',
status: 403,
response: {
url: 'https://api.github.com/repos/reactplay/react-play/releases',
status: 403,
headers: {
'access-control-allow-origin': '*',
'access-control-expose-headers': 'ETag, Link, Location, Retry-After, X-GitHub-OTP, X-RateLimit-Limit, X-RateLimit-Remaining, X-RateLimit-Used, X-RateLimit-Resource, X-RateLimit-Reset, X-OAuth-Scopes, X-Accepted-OAuth-Scopes, X-Poll-Interval, X-GitHub-Media-Type, X-GitHub-SSO, X-GitHub-Request-Id, Deprecation, Sunset',
'content-encoding': 'gzip',
'content-security-policy': "default-src 'none'",
'content-type': 'application/json; charset=utf-8',
date: 'Wed, 25 Feb 2026 03:41:58 GMT',
'referrer-policy': 'origin-when-cross-origin, strict-origin-when-cross-origin',
server: 'github.com',
'strict-transport-security': 'max-age=31536000; includeSubdomains; preload',
'transfer-encoding': 'chunked',
vary: 'Accept-Encoding, Accept, X-Requested-With',
'x-accepted-github-permissions': 'contents=write; contents=write,workflows=write',
'x-content-type-options': 'nosniff',
'x-frame-options': 'deny',
'x-github-api-version-selected': '2022-11-28',
'x-github-media-type': 'github.v3; format=json',
'x-github-request-id': 'F00A:20CB03:12F7BF1:50C4E84:699E6F86',
'x-ratelimit-limit': '5000',
'x-ratelimit-remaining': '4990',
'x-ratelimit-reset': '1771994400',
'x-ratelimit-resource': 'core',
'x-ratelimit-used': '10',
'x-xss-protection': '0'
},
data: {
message: 'Resource not accessible by integration',
documentation_url: 'https://docs.github.com/rest/releases/releases#create-a-release',
status: '403'
}
},
request: {
method: 'POST',
url: 'https://api.github.com/repos/reactplay/react-play/releases',
headers: {
accept: 'application/vnd.github.v3+json',
'user-agent': 'probot/12.4.0 octokit-core.js/3.6.0 Node.js/20.19.6 (linux; x64)',
'x-github-delivery': '22381118614',
authorization: 'token [REDACTED]',
'content-type': 'application/json; charset=utf-8'
},
body: '{"target_commitish":"refs/pull/1690/merge","name":"v1.0.6 🌈","tag_name":"v1.0.6","body":"## Changes\\n\\n- Add home and Back to top button @Dhirajgithub813 (#1681)\\n- Play/pomodoro timer @deansereigns (#1680)\\n- Character Counter @IamAnkit19 (#1633)\\n- Added:SVG-Optimizer @Abhrxdip (#1666)\\n- Add Body Composition Calculator play @deansereigns (#1672)\\n- fix: mobile drawer close-on-outside-click, navbar layout offset, testimonials error handling \\\\& leaderboard UI @aniketmishra-0 (#1670)\\n- This PR removes unused variables reported by the linter to clean up warnings and improve code quality. @krish782 (#1634)\\n- fix(header): improve navbar scroll behavior with banner support @harishsehlangia (#1669)\\n- fix(common): close mobile nav drawer when tapping outside overlay @aniketmishra-0 (#1663)\\n- Added virtual whiteboard(Hard level) @Abhrxdip (#1658)\\n- fix: improve copy button UX in Password Generator @harishsehlangia (#1655)\\n- This PR introduces a React-based API Testing Tool that allows users to build, send, and test HTTP requests directly within ReactPlay. @Abhrxdip (#1651)\\n- ✨ Fix: Properly Align Tech Stack Icons Across Sections. @Rohs21 (#1624)\\n- complate simple-todo-app @efebaslilar (#1620)\\n- style: update leaderboard styles and UI @aayu5hgit (#1619)\\n- Revert \\"feat: update leaderboard UI with top 3 highlights and trophy icons\\" @priyankarpal (#1622)\\n- feat: update leaderboard UI with top 3 highlights and trophy icons @arunava2018 (#1617)\\n- Potential fix for code scanning alert no. 13: Inefficient regular expression @priyankarpal (#1614)\\n- Potential fix for code scanning alert no. 14: Workflow does not contain permissions @priyankarpal (#1613)\\n- fix: Ensure header button border remain visible on mobile hover/focus @Rohs21 (#1602)\\n- Added text-to-speech play @Ritesh381 (#1604)\\n- refactor
|
|
|
|
|
|
|
|
|
The logs for this run have expired and are no longer available.
Loading