chore: add manifest.json and service-worker to prepare pwa #24
Conversation
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
| ` | ||
| <script> | ||
| if ('serviceWorker' in navigator) { | ||
| const swCode = \`${serviceWorkerCode.replace(/`/g, '\\`')}\`; |
Check failure
Code scanning / CodeQL
Incomplete string escaping or encoding High
Show autofix suggestion
Hide autofix suggestion
Copilot Autofix AI about 1 month ago
To fix the problem, we need to ensure that all occurrences of backslashes and backticks in the serviceWorkerCode are properly escaped. This can be achieved by using a regular expression with the global flag to replace both backslashes and backticks. We will use a well-tested sanitization library if possible, but in this case, we will implement a custom solution using regular expressions.
We will modify the code to replace both backslashes and backticks in the serviceWorkerCode string. Specifically, we will update line 37 to use a regular expression that handles both characters.
| @@ -36,3 +36,3 @@ | ||
| if ('serviceWorker' in navigator) { | ||
| const swCode = \`${serviceWorkerCode.replace(/`/g, '\\`')}\`; | ||
| const swCode = \`${serviceWorkerCode.replace(/\\/g, '\\\\').replace(/`/g, '\\`')}\`; | ||
| const blob = new Blob([swCode], { type: 'application/javascript' }); |
No description provided.