From 2df08d8fc67c8c02dc4573f5e41147bcaf4ef6d1 Mon Sep 17 00:00:00 2001 From: Leigh Johnson Date: Fri, 1 Jul 2016 09:02:29 -0400 Subject: [PATCH] fix xss vulnerability in notification template test, resolves #2727 --- .../notification-templates-list/list.controller.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/awx/ui/client/src/notifications/notification-templates-list/list.controller.js b/awx/ui/client/src/notifications/notification-templates-list/list.controller.js index 5a7a76b8a9..9ea29b7374 100644 --- a/awx/ui/client/src/notifications/notification-templates-list/list.controller.js +++ b/awx/ui/client/src/notifications/notification-templates-list/list.controller.js @@ -147,7 +147,7 @@ export default }; scope.testNotification = function(){ - var name = this.notification_template.name; + var name = $filter('sanitize')(this.notification_template.name); Rest.setUrl(defaultUrl + this.notification_template.id +'/test/'); Rest.post({}) .then(function (data) {