Graham McIntire
90bf44ce90
`handle_event("switch_tab", ...)` ran `String.to_existing_atom/1` on
the raw `tab` value from the browser, so a stale, forged, or
mistyped client event with any unknown string crashed the LiveView
with `ArgumentError: not an already existing atom`.
Compares against an explicit `@valid_tabs` allowlist (`:single`,
`:csv`, `:adif`) — known values switch the active tab, anything
else is ignored.
|
||
|---|---|---|
| .. | ||
| controllers | ||
| live | ||
| plugs | ||
| analytics_test.exs | ||
| live_table_footer_test.exs | ||
| metrics_log_suppression_test.exs | ||
| metrics_plug_test.exs | ||
| skew_t_property_test.exs | ||
| skew_t_test.exs | ||
| telemetry_test.exs | ||
| user_auth_test.exs | ||