Skip to content

fix: stored XSS in createDiffHTML author colors (GHSA-6vx2-3gwr-958v) #9585

fix: stored XSS in createDiffHTML author colors (GHSA-6vx2-3gwr-958v)

fix: stored XSS in createDiffHTML author colors (GHSA-6vx2-3gwr-958v) #9585

Triggered via pull request September 16, 2026 11:14
Status Success
Total duration 7m 15s
Artifacts

frontend-tests.yml

on: pull_request
Playwright Chrome
3m 49s
Playwright Chrome
Playwright Firefox
5m 4s
Playwright Firefox
Playwright Chrome with plugins
4m 34s
Playwright Chrome with plugins
Playwright Firefox with plugins
6m 23s
Playwright Firefox with plugins
Fit to window
Zoom out
Zoom in

Annotations

2 errors, 4 warnings, and 4 notices
[chromium] › tests/frontend-new/specs/undo_redo_scroll.spec.ts:31:7 › Undo scroll-to-caret (#7007) › Ctrl+Z scrolls viewport up when the caret lands above the view: src/tests/frontend-new/specs/undo_redo_scroll.spec.ts#L74
1) [chromium] › tests/frontend-new/specs/undo_redo_scroll.spec.ts:31:7 › Undo scroll-to-caret (#7007) › Ctrl+Z scrolls viewport up when the caret lands above the view Error: expect(received).toBeLessThan(expected) Expected: < 526 Received: 527 72 | // Pre-fix: scrollAfter ≈ scrollBefore (no scroll). 73 | // Fixed: scrollAfter < scrollBefore (viewport moved up toward the caret). > 74 | expect(scrollAfter).toBeLessThan(scrollBefore); | ^ 75 | }); 76 | 77 | test('Ctrl+Z scrolls viewport down when the caret lands below the view', async function ({page}) { at /home/runner/work/etherpad/etherpad/src/tests/frontend-new/specs/undo_redo_scroll.spec.ts:74:25
[chromium] › tests/frontend-new/specs/undo_redo_scroll.spec.ts:31:7 › Undo scroll-to-caret (#7007) › Ctrl+Z scrolls viewport up when the caret lands above the view: src/tests/frontend-new/specs/undo_redo_scroll.spec.ts#L74
1) [chromium] › tests/frontend-new/specs/undo_redo_scroll.spec.ts:31:7 › Undo scroll-to-caret (#7007) › Ctrl+Z scrolls viewport up when the caret lands above the view Error: expect(received).toBeLessThan(expected) Expected: < 577 Received: 578 72 | // Pre-fix: scrollAfter ≈ scrollBefore (no scroll). 73 | // Fixed: scrollAfter < scrollBefore (viewport moved up toward the caret). > 74 | expect(scrollAfter).toBeLessThan(scrollBefore); | ^ 75 | }); 76 | 77 | test('Ctrl+Z scrolls viewport down when the caret lands below the view', async function ({page}) { at /home/runner/work/etherpad/etherpad/src/tests/frontend-new/specs/undo_redo_scroll.spec.ts:74:25
Playwright Chrome
No files were found with the provided path: src/playwright-report/. No artifacts will be uploaded.
Playwright Chrome with plugins
No files were found with the provided path: src/playwright-report/. No artifacts will be uploaded.
Playwright Firefox
No files were found with the provided path: src/playwright-report/. No artifacts will be uploaded.
Playwright Firefox with plugins
No files were found with the provided path: src/playwright-report/. No artifacts will be uploaded.
🎭 Playwright Run Summary
1 flaky [chromium] › tests/frontend-new/specs/undo_redo_scroll.spec.ts:31:7 › Undo scroll-to-caret (#7007) › Ctrl+Z scrolls viewport up when the caret lands above the view 1 skipped 243 passed (3.0m)
🎭 Playwright Run Summary
1 flaky [chromium] › tests/frontend-new/specs/undo_redo_scroll.spec.ts:31:7 › Undo scroll-to-caret (#7007) › Ctrl+Z scrolls viewport up when the caret lands above the view 2 skipped 269 passed (3.4m)
🎭 Playwright Run Summary
2 skipped 243 passed (4.1m)
🎭 Playwright Run Summary
3 skipped 269 passed (4.9m)