Skip to content

Commit

Permalink
don't try to decode score in static file
Browse files Browse the repository at this point in the history
  • Loading branch information
DanielRyanSmith committed Feb 12, 2025
1 parent c7d0cc1 commit f90b9c2
Showing 1 changed file with 2 additions and 1 deletion.
3 changes: 2 additions & 1 deletion webapp/components/interop-data-manager.js
Original file line number Diff line number Diff line change
Expand Up @@ -387,7 +387,8 @@ async function fetchCsvContents(url, isMobileScoresView) {
}

let csvLines;
if (isMobileScoresView) {
// Active mobile scores require decoding.
if (isMobileScoresView && url.startsWith('https://api.github.com')) {

Check failure

Code scanning / CodeQL

Incomplete URL substring sanitization High

'
https://api.github.com
' may be followed by an arbitrary host name.
const respJson = await csvResp.json();
const csvText = atob(respJson['content']);
csvLines = csvText.split('\r\n').filter(l => l);
Expand Down

0 comments on commit f90b9c2

Please sign in to comment.