Sanitize JT info popover strings before rending to avoid any monkeys being unnecessarily punched.

This commit is contained in:
Michael Abashian
2016-12-08 11:42:24 -05:00
parent bf6ee24a0c
commit 7e571d8ec9

View File

@@ -1,3 +1,3 @@
<div class="List-infoCell">
<a aw-pop-over="<div>INVENTORY: {{job_template.summary_fields.inventory.name || 'NONE SELECTED'}}</div><div>PROJECT: {{job_template.summary_fields.project.name}}</div><div>PLAYBOOK: {{job_template.playbook}}</div><div>CREDENTIAL: {{job_template.summary_fields.credential.name || 'NONE SELECTED'}}</div>" data-popover-title="{{job_template.name}}">INFO</a>
<a aw-pop-over="<div>INVENTORY: {{(job_template.summary_fields.inventory.name | sanitize) || 'NONE SELECTED'}}</div><div>PROJECT: {{job_template.summary_fields.project.name | sanitize}}</div><div>PLAYBOOK: {{job_template.playbook| sanitize}}</div><div>CREDENTIAL: {{(job_template.summary_fields.credential.name | sanitize) || 'NONE SELECTED'}}</div>" data-popover-title="{{job_template.name| sanitize}}">INFO</a>
</div>