External-Mirrors/awx
2
0
Fork 0
mirror of https://github.com/ansible/awx.git synced 2026-03-19 18:07:33 -02:30
Code Issues Packages Projects Releases Wiki Activity

Use textContent property instead of innerHTML in sanitize filter

Browse Source
This commit is contained in:
Marliana Lara
2018-06-14 16:07:46 -04:00
parent 1b5ea07745
commit 9a73d9c616
2 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
awx/ui/client/features/output/details.component.js
View File

@@ -289,7 +289,7 @@ function getProjectDetails () {
const label = strings.get('labels.PROJECT'); const label = strings.get('labels.PROJECT');
const link = `/#/projects/${project.id}`; const link = `/#/projects/${project.id}`;
const value = $filter('sanitize')(project.name); const value = project.name;
const tooltip = strings.get('tooltips.PROJECT'); const tooltip = strings.get('tooltips.PROJECT');
return { label, link, value, tooltip }; return { label, link, value, tooltip };

2
awx/ui/client/src/shared/filters/xss-sanitizer.filter.js
View File

@@ -6,7 +6,7 @@
export default [function() { export default [function() {
return function(input) { return function(input) {
input = $("<span>").text(input)[0].innerHTML; input = $("<span>").text(input)[0].textContent;
return input; return input;
}; };
}]; }];