28760557806
95%

Ran 06 Jul 2026 12:39AM UTC

Jobs 1

Files 32

Run time 1min

Badge

Embed ▾

Committed 06 Jul 2026 12:38AM UTC coverage: 94.852% (-0.1%) from 94.953%

Build # 28760557806

Build Type

push

github

Committed by

web-flow

Commit Message

fix(Chip): sanitize selected/remove icons before injection (#1119)

selectedIcon and removeIcon (settable via data-coreui-* attributes) were
written to innerHTML with no sanitizer, unlike rating.js. Add sanitize /
allowList / sanitizeFn options (SVG-aware allow list), route both icons
through sanitizeHtml, and strip sanitize/allowList/sanitizeFn from data
attributes so the sanitizer can't be disabled from markup.

Coverage Stats

967 of 1071 branches covered (90.29%)

Branch coverage included in aggregate %.

2884 of 2989 relevant lines covered (96.49%)

233.45 hits per line

Coverage Regressions

Lines	Coverage	∆	File
1	64.19	-1.35%	js/src/navigation.js
1	96.67	-0.56%	js/src/sidebar.js
1	90.91	-3.64%	js/src/util/focustrap.js

Jobs

ID	Job ID	Ran	Files	Coverage
1	28760557806.1	06 Jul 2026 12:39AM UTC	32	94.85	GitHub Action Run

coreui / coreui / 28760557806
95%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Coverage Regressions

Jobs

Source Files on build 28760557806

coreui / coreui / 28760557806 95%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Coverage Regressions

Jobs

Source Files on build 28760557806

coreui / coreui / 28760557806
95%

README BADGES
x