Merge pull request #404 from bcgov/removesonarsecurityhotspots

added sanitize
bcgov · Feb 14, 2023 · e7683c4 · e7683c4
2 parents 3c0202a + 079d72b
commit e7683c4
Show file tree

Hide file tree

Showing 3 changed files with 19 additions and 3 deletions.
diff --git a/frontend/package-lock.json b/frontend/package-lock.json
diff --git a/frontend/package.json b/frontend/package.json
@@ -11,6 +11,7 @@
   },
   "dependencies": {
     "@bcgov/bootstrap-theme": "https://github.com/bcgov/bootstrap-theme/releases/download/v1.1.3/bcgov-bootstrap-theme-1.1.3.tgz",
+    "@braintree/sanitize-url": "^6.0.2",
     "@fortawesome/fontawesome-free": "^5.15.3",
     "@vuejs-community/vue-filter-date-format": "^1.6.3",
     "@vuejs-community/vue-filter-date-parse": "^1.1.6",
@@ -43,4 +44,4 @@
     "eslint-plugin-vue": "^5.0.0",
     "vue-template-compiler": "^2.6.10"
   }
-}
+}
diff --git a/frontend/src/App.vue b/frontend/src/App.vue
@@ -34,6 +34,7 @@ import { mapActions, mapMutations, mapGetters, mapState } from "vuex";
 
 import Bcheader from "@/components/BCHeader";
 import BCFooter from "@/components/BCFooter";
+import sanitizeUrl from "@braintree/sanitize-url";
 import EnvironmentBanner from "@/components/EnvironmentBanner";
 import { Routes } from "@/utils/constants";
 export default {
@@ -44,8 +45,8 @@ export default {
   },
   data() {
     return {
-      login: Routes.LOGIN,
-      userLogout: Routes.LOGOUT,
+      login: "",
+      userLogout: "",
       host: location.protocol + "//" + location.host,
     };
   },
@@ -70,6 +71,9 @@ export default {
     ...mapActions("useraccess", ["userAccess"]),
   },
   async created() {
+    this.login = sanitizeUrl(Routes.LOGIN);
+    this.userLogout = sanitizeUrl(Routes.LOGOUT);
+
     this.getJwtToken()
       .then(() => this.setApplicationVariables())
       .catch((e) => {