fixing html sanitiation

This commit is contained in:
root 2023-12-27 13:13:03 +00:00
parent bc4a8d60f4
commit fd2c6fd49e
3 changed files with 6 additions and 4 deletions

View file

@ -28,13 +28,13 @@ module.exports = Mn.View.extend({
return '#' + (this.object_id || '?');
},
createSpecificTableCell: function(value) {
createSpecificTableCell: function(value) {
if (value && value.trim() !== '') {
value = value.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#039;");
return `<td>${value}</td>`;
} else {
return `<td class="text-center">-</td>`;
}
}
}
}
});

View file

@ -30,7 +30,8 @@ module.exports = Mn.View.extend({
},
createSpecificTableCell: function(value) {
if (value && value.trim() !== '') {
return `<td>${value}</td>`;
value = value.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#039;");
return `<td>${value}</td>`;
} else {
return `<td class="text-center">-</td>`;
}

View file

@ -30,6 +30,7 @@ module.exports = Mn.View.extend({
},
createSpecificTableCell: function(value) {
if (value && value.trim() !== '') {
value = value.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#039;");
return `<td>${value}</td>`;
} else {
return `<td class="text-center">-</td>`;