ThatGuyJack/nginx-proxy-manager
1
0
Fork 0
mirror of https://github.com/NginxProxyManager/nginx-proxy-manager.git synced 2025-09-15 19:32:35 +00:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

fixing html sanitiation

Browse Source
This commit is contained in:
root
2023-12-27 13:13:03 +00:00
parent bc4a8d60f4
commit fd2c6fd49e
3 changed files with 6 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
frontend/js/app/openappsec-log/list-all/item.js
View File

@@ -28,13 +28,13 @@ module.exports = Mn.View.extend({
return '#' + (this.object_id || '?'); return '#' + (this.object_id || '?');
}, },
createSpecificTableCell: function(value) { createSpecificTableCell: function(value) {
if (value && value.trim() !== '') { if (value && value.trim() !== '') {
value = value.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#039;");
return `<td>${value}</td>`; return `<td>${value}</td>`;
} else { } else {
return `<td class="text-center">-</td>`; return `<td class="text-center">-</td>`;
} }
} }
} }
}); });

3
frontend/js/app/openappsec-log/list-important/item.js
View File

@@ -30,7 +30,8 @@ module.exports = Mn.View.extend({
}, },
createSpecificTableCell: function(value) { createSpecificTableCell: function(value) {
if (value && value.trim() !== '') { if (value && value.trim() !== '') {
return `<td>${value}</td>`; value = value.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#039;");
return `<td>${value}</td>`;
} else { } else {
return `<td class="text-center">-</td>`; return `<td class="text-center">-</td>`;
} }

1
frontend/js/app/openappsec-log/list-notifications/item.js
View File

@@ -30,6 +30,7 @@ module.exports = Mn.View.extend({
}, },
createSpecificTableCell: function(value) { createSpecificTableCell: function(value) {
if (value && value.trim() !== '') { if (value && value.trim() !== '') {
value = value.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#039;");
return `<td>${value}</td>`; return `<td>${value}</td>`;
} else { } else {
return `<td class="text-center">-</td>`; return `<td class="text-center">-</td>`;