Merge pull request #3097 from ansible/jakemcdermott-sanitize-jdetails

sanitize reflected user input on job details page

Reviewed-by: https://github.com/softwarefactory-project-zuul[bot]
This commit is contained in:
softwarefactory-project-zuul[bot]
2019-01-29 21:34:32 +00:00
committed by GitHub

View File

@@ -114,13 +114,14 @@ function getVerbosityDetails () {
} }
function getEnvironmentDetails (virtualenv) { function getEnvironmentDetails (virtualenv) {
const value = virtualenv || resource.model.get('custom_virtualenv'); const customVirtualenv = virtualenv || resource.model.get('custom_virtualenv');
if (!value || value === '') { if (!customVirtualenv || customVirtualenv === '') {
return null; return null;
} }
const label = strings.get('labels.ENVIRONMENT'); const label = strings.get('labels.ENVIRONMENT');
const value = $filter('sanitize')(customVirtualenv);
return { label, value }; return { label, value };
} }
@@ -345,6 +346,7 @@ function getInventoryScmDetails (updateId, updateStatus) {
const link = `/#/projects/${projectId}`; const link = `/#/projects/${projectId}`;
const jobTooltip = strings.get('tooltips.INVENTORY_SCM_JOB'); const jobTooltip = strings.get('tooltips.INVENTORY_SCM_JOB');
const tooltip = strings.get('tooltips.INVENTORY_SCM'); const tooltip = strings.get('tooltips.INVENTORY_SCM');
const value = $filter('sanitize')(projectName);
let icon; let icon;
@@ -354,7 +356,7 @@ function getInventoryScmDetails (updateId, updateStatus) {
icon = `fa icon-job-${status}`; icon = `fa icon-job-${status}`;
} }
return { label, link, icon, jobLink, jobTooltip, tooltip, value: projectName }; return { label, link, icon, jobLink, jobTooltip, tooltip, value };
} }
function getSCMRevisionDetails () { function getSCMRevisionDetails () {