Fabio/nginx-proxy-manager
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

fixing html sanitiation

Browse source
This commit is contained in:
root 2023-12-27 13:13:03 +00:00
parent bc4a8d60f4
commit fd2c6fd49e
3 changed files with 6 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
frontend/js/app/openappsec-log/list-all/item.js
View file

@ -28,13 +28,13 @@ module.exports = Mn.View.extend({
return '#' + (this.object_id || '?'); return '#' + (this.object_id || '?');
}, },
createSpecificTableCell: function(value) { createSpecificTableCell: function(value) {
if (value && value.trim() !== '') { if (value && value.trim() !== '') {
value = value.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#039;");
return `<td>${value}</td>`; return `<td>${value}</td>`;
} else { } else {
return `<td class="text-center">-</td>`; return `<td class="text-center">-</td>`;
} }
} }
} }
}); });

3
frontend/js/app/openappsec-log/list-important/item.js
View file

@ -30,7 +30,8 @@ module.exports = Mn.View.extend({
}, },
createSpecificTableCell: function(value) { createSpecificTableCell: function(value) {
if (value && value.trim() !== '') { if (value && value.trim() !== '') {
return `<td>${value}</td>`; value = value.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#039;");
return `<td>${value}</td>`;
} else { } else {
return `<td class="text-center">-</td>`; return `<td class="text-center">-</td>`;
} }

1
frontend/js/app/openappsec-log/list-notifications/item.js
View file

@ -30,6 +30,7 @@ module.exports = Mn.View.extend({
}, },
createSpecificTableCell: function(value) { createSpecificTableCell: function(value) {
if (value && value.trim() !== '') { if (value && value.trim() !== '') {
value = value.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#039;");
return `<td>${value}</td>`; return `<td>${value}</td>`;
} else { } else {
return `<td class="text-center">-</td>`; return `<td class="text-center">-</td>`;