Files
cacti/patches/pace-js+1.2.4.patch
T
Thomas VincentandTheWitness 97e67c6777 security: harden browser rendering and review CodeQL boundaries (#8298)
* security: harden browser history and dependency option merging

Signed-off-by: Thomas Vincent <thomasvincent@gmail.com>

* docs: record CodeQL triage decisions and follow-up scope

Signed-off-by: Thomas Vincent <thomasvincent@gmail.com>

* test: wait for history reload before inspecting browser storage

Signed-off-by: Thomas Vincent <thomasvincent@gmail.com>

* security: isolate HTMX history from the legacy navigation handler

Signed-off-by: Thomas Vincent <thomasvincent@gmail.com>

* ci: build CodeQL assets through controlled dependency installs

Signed-off-by: Thomas Vincent <thomasvincent@gmail.com>

* security: render form validation messages as plain text

Signed-off-by: Thomas Vincent <thomasvincent@gmail.com>

* test: verify drag rows and color input security boundaries

Signed-off-by: Thomas Vincent <thomasvincent@gmail.com>

* test: verify tree navigation rename and datetime input boundaries

Signed-off-by: Thomas Vincent <thomasvincent@gmail.com>

* security: harden menu rendering and complete CodeQL caller review

Signed-off-by: Thomas Vincent <thomasvincent@gmail.com>

* security: centralize menu rendering and stabilize certificate CI

Signed-off-by: Thomas Vincent <thomasvincent@gmail.com>

* test: align certificate expectation with parallel web PR

Signed-off-by: Thomas Vincent <thomasvincent@gmail.com>

---------

Signed-off-by: Thomas Vincent <thomasvincent@gmail.com>
Co-authored-by: TheWitness <thewitness@cacti.net>
2026-10-11 21:26:38 -04:00

18 lines
991 B
Diff

diff --git a/node_modules/pace-js/pace.js b/node_modules/pace-js/pace.js
index 0831a47..092b731 100644
--- a/node_modules/pace-js/pace.js
+++ b/node_modules/pace-js/pace.js
@@ -118,1 +118,2 @@
- if (!__hasProp.call(source, key)) continue;
+ if (!__hasProp.call(source, key)) continue;
+ if (key === '__proto__' || key === 'constructor' || key === 'prototype') continue;
@@ -273,7 +273,7 @@
}
this.el = document.createElement('div');
this.el.className = "pace pace-active";
- document.body.className = document.body.className.replace(/(pace-done )|/, 'pace-running ');
+ document.body.className = document.body.className.replace(/(pace-done )/, 'pace-running ');
var _custom_class_name = (options.className !== '') ? ' '+options.className : '';
this.el.innerHTML = '<div class="pace-progress'+_custom_class_name+'">\n <div class="pace-progress-inner"></div>\n</div>\n<div class="pace-activity"></div>';
if (targetElement.firstChild != null) {