Activities of "alper"

there's not much thing we can do for the false-positive alert. we are using the latest version of Toast UI and we cannot replace it or change the source of this 3rd party. you may ask your system administrator to set it as false-positive.

Can you try to create a new ABP project and test if the same issue occurs on a brand new project?

you may need to clear your browser cookies. both website are HTTPS?

But why you don't just override the GetAsync() method of TenantConfigurationProvider in your project. This method is virtual and you can override it. Create your own custom class and override it in your domain project.

[Volo.Abp.DependencyInjection.Dependency(ReplaceServices = true)]
[ExposeServices(typeof(IdentityUserManager))]
public class MyTenantConfigurationProvider : TenantConfigurationProvider
{
    public MyTenantConfigurationProvider(
        ITenantResolver tenantResolver,
        ITenantStore tenantStore, 
        ITenantResolveResultAccessor tenantResolveResultAccessor) : 
        base(tenantResolver, tenantStore, tenantResolveResultAccessor)
    {
    }

    public override async Task<TenantConfiguration> GetAsync(bool saveResolveResult = false)
    {
        return await Task.FromResult(new TenantConfiguration(Guid.Empty, "dummy"));
    }
}

Reference: https://docs.abp.io/en/abp/latest/Customizing-Application-Modules-Overriding-Services

@jogoertzen as I see, the vulnerability is at v1.x We upgraded to v2.x in our latest releases. You can upgrade your ABP version. See where it's used https://github.com/abpframework/abp/blob/dev/npm/packs/tui-editor/package.json#L12

@berkan can you test this case?

ok I noted it. we'll investigate on this topic.

thanks for the feedback

add the complete framework or I didn't test but, you can try to add the individual project change the project references to NuGet reference.

hi kaustubh,

you can send us your project for further investigation at info@abp.io