Commit 943cbd6
authored
Remove JSONP callback support in modConnectorResponse (#16775)
### What does it do?
Removes the JSONP callback support in modConnectorResponse.
### Why is it needed?
This feature is potentially vulnerable to JSONP injection.
### How to test
Make sure any callback parameters to a connector request are ignored.
### Related issue(s)/PR(s)
#12420 and #13051 — vulnerability was reported privately.1 parent a94a0f6 commit 943cbd6
1 file changed
+0
-3
lines changed| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
192 | 192 | | |
193 | 193 | | |
194 | 194 | | |
195 | | - | |
196 | | - | |
197 | | - | |
198 | 195 | | |
199 | 196 | | |
200 | 197 | | |
| |||
0 commit comments