fixing html sanitiation
This commit is contained in:
parent
bc4a8d60f4
commit
fd2c6fd49e
3 changed files with 6 additions and 4 deletions
|
@ -28,13 +28,13 @@ module.exports = Mn.View.extend({
|
|||
|
||||
return '#' + (this.object_id || '?');
|
||||
},
|
||||
createSpecificTableCell: function(value) {
|
||||
createSpecificTableCell: function(value) {
|
||||
if (value && value.trim() !== '') {
|
||||
value = value.replace(/&/g, "&").replace(/</g, "<").replace(/>/g, ">").replace(/"/g, """).replace(/'/g, "'");
|
||||
return `<td>${value}</td>`;
|
||||
} else {
|
||||
return `<td class="text-center">-</td>`;
|
||||
}
|
||||
}
|
||||
|
||||
}
|
||||
});
|
||||
|
|
|
@ -30,7 +30,8 @@ module.exports = Mn.View.extend({
|
|||
},
|
||||
createSpecificTableCell: function(value) {
|
||||
if (value && value.trim() !== '') {
|
||||
return `<td>${value}</td>`;
|
||||
value = value.replace(/&/g, "&").replace(/</g, "<").replace(/>/g, ">").replace(/"/g, """).replace(/'/g, "'");
|
||||
return `<td>${value}</td>`;
|
||||
} else {
|
||||
return `<td class="text-center">-</td>`;
|
||||
}
|
||||
|
|
|
@ -30,6 +30,7 @@ module.exports = Mn.View.extend({
|
|||
},
|
||||
createSpecificTableCell: function(value) {
|
||||
if (value && value.trim() !== '') {
|
||||
value = value.replace(/&/g, "&").replace(/</g, "<").replace(/>/g, ">").replace(/"/g, """).replace(/'/g, "'");
|
||||
return `<td>${value}</td>`;
|
||||
} else {
|
||||
return `<td class="text-center">-</td>`;
|
||||
|
|
Loading…
Reference in a new issue