Merge pull request #351 from GOKULRAJ136/MOSIP-36172

Security hotspot fix [MOSIP-37914]
mosip · Jan 9, 2025 · ea8fa6c · ea8fa6c
2 parents 3929305 + 60937e7
commit ea8fa6c
Showing 1 changed file with 3 additions and 5 deletions.
diff --git a/admin-ui/src/app/features/download-card/download-card/download-card.component.ts b/admin-ui/src/app/features/download-card/download-card/download-card.component.ts
@@ -1,11 +1,10 @@
-import { Component, OnInit } from '@angular/core';
+import { Component, OnInit, Sanitizer, SecurityContext } from '@angular/core';
 import { TranslateService } from '@ngx-translate/core';
 import { AppConfigService } from 'src/app/app-config.service';
 import { AuditService } from 'src/app/core/services/audit.service';
 import { DataStorageService } from 'src/app/core/services/data-storage.service';
 import { MatDialog } from '@angular/material/dialog';
 import { DialogComponent } from 'src/app/shared/dialog/dialog.component';
-import { DomSanitizer } from '@angular/platform-browser';
 import { saveAs } from 'file-saver';
 import { ActivatedRoute, Router, NavigationEnd } from '@angular/router';
 import { HttpErrorResponse } from '@angular/common/http';
@@ -38,7 +37,7 @@ export class DownloadCardComponent implements OnInit {
     private activatedRoute: ActivatedRoute,
     private dataStorageService: DataStorageService,
     public dialog: MatDialog,
-    private sanitizer:DomSanitizer,
+    private sanitizer: Sanitizer,
     private router: Router
   ) {
     translate.use(appService.getConfig().primaryLangCode);
@@ -81,8 +80,7 @@ export class DownloadCardComponent implements OnInit {
   }
 
   renderImage(){
-    const trustedUrl = this.sanitizer.bypassSecurityTrustResourceUrl(this.data.applicantPhoto);
-    this.applicantPhoto = trustedUrl;
+    this.applicantPhoto = this.sanitizer.sanitize(SecurityContext.URL, this.data.applicantPhoto);
   }  
 
   search() {