#2669 Fixed XSS vulnerabilities in graphical view components:

[Limraj]

• Fixed Simple Point: Name, Point name override, Style attribute, Display controls, Background color;
• Fixed Simple compound: Name, Background colour, Lead point, Sub point X;

[github-actions]

Java Script Mocha Unit Test Results

268 tests  ±0   268 ✅ ±0   3s ⏱️ ±0s
 70 suites ±0     0 💤 ±0 
  1 files   ±0     0 ❌ ±0 

Results for commit 0f52419. ± Comparison against base commit e9beecc.

♻️ This comment has been updated with latest results.

[github-actions]

Java JUnit Test Results

2 517 tests  ±0   2 517 ✅ ±0   42s ⏱️ -2s
  116 suites ±0       0 💤 ±0 
  116 files   ±0       0 ❌ ±0 

Results for commit 0f52419. ± Comparison against base commit e9beecc.

♻️ This comment has been updated with latest results.

[Patrykb0802]

Fixed Simple Point:

Point value is showing like: --> error

• Name ---> ok, point selected with name of is not causing any issues

• Point name override --> ok:
  

• Style attribute ---> seems to not being escaped:

Set value:

Display controls ---> ok, content is escaped:

Background color ---> seems to not being escaped:

Set value:

• Fixed Simple compound:

• Name --> ok:
  

• Background colour --> setting value with potential XSS and saving it --> no error --> saving graphical view and on read mode alert shows up one time:
  

• Lead point --> ok, no alerts when data point with such name is selected:

• Sub point X --> ok, no alerts when data point with such name is selected:
  

[Patrykb0802]

Simple point works fine now:
All fields are escaped

Simple compound works fine:

no pop ups/alerts are occuring