Timeline for Lightning SVG Icon Component Helper - SVG class not being set
Current License: CC BY-SA 3.0
2 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Aug 26, 2016 at 4:21 | comment | added | Robert Sussland | FYI, you have a cross site scripting issue here when you assign the value of outerText to outerHTML. This will be exploitable if svgPath can be influenced by the attacker (e.g. passed in as a non-private attribute or app event). | |
| Nov 24, 2015 at 2:21 | history | answered | James Loghry | CC BY-SA 3.0 |