DOM text reinterpreted as HTML in `workflow-logs-viewer.tsx`

[jessicacunha]

DOM text reinterpreted as HTML in `workflow-logs-viewer.tsx`

[jessicacunha]

I`m working in this issue

[agilgur5]

I assume this is related to the other two CodeQL issues filed within the same few hours, #13105 and #13104.

You didn't cite your sources here though nor list the specific line number. Please cite your sources and directly quote your sources. When filing an issue to any OSS repo, please also make sure to fill out the issue template, answering the questions as asked, and follow the contribution guidelines.

Also I'm not sure who organized these issues, but it would have made sense to notify organizations like Argo before filing issues, as well as list that they are part of an organized effort in the issues.
At least one of these has also been a very obvious false positive, which is a poor use of limited maintainer time.

I also don't see any line number in workflow-logs-viewer.tsx that would correspond to "DOM text reinterpreted as HTML" either, and with regard to "escaping meta-characters", React itself does this to prevent XSS, unless one uses dangerouslySetInnerHTML, which Argo does not.

[github-actions]

This issue has been automatically marked as stale because it has not had recent activity and needs more information. It will be closed if no further activity occurs.