Actualizacion de seguridad
This commit is contained in:
18
node_modules/ejs/README.md
generated
vendored
18
node_modules/ejs/README.md
generated
vendored
@@ -1,9 +1,23 @@
|
||||
Embedded JavaScript templates<br/>
|
||||
[](https://travis-ci.org/mde/ejs)
|
||||
[](https://david-dm.org/mde/ejs?type=dev)
|
||||
[](https://snyk.io/test/npm/ejs)
|
||||
=============================
|
||||
|
||||
## Security
|
||||
|
||||
Security professionals, before reporting any security issues, please reference the
|
||||
<a href="https://github.com/mde/ejs/blob/main/SECURITY.md">SECURITY.md</a>
|
||||
in this project, in particular, the following: "EJS is effectively a JavaScript runtime.
|
||||
Its entire job is to execute JavaScript. If you run the EJS render method without
|
||||
checking the inputs yourself, you are responsible for the results."
|
||||
|
||||
In short, DO NOT submit 'vulnerabilities' that include this snippet of code:
|
||||
|
||||
```javascript
|
||||
app.get('/', (req, res) => {
|
||||
res.render('index', req.query);
|
||||
});
|
||||
```
|
||||
|
||||
## Installation
|
||||
|
||||
```bash
|
||||
|
||||
Reference in New Issue
Block a user