[Web] Fixed one more possible XSS
XSS might be possible when using a specific-crafted request (harder than previous ones). Might also easily cause JS errors and making the "mailcow UI"-logs not accessible anymoremaster
parent
4f25a3646e
commit
409ecf7fd5
|
@ -564,6 +564,7 @@ jQuery(function($){
|
|||
$.each(data, function (i, item) {
|
||||
if (item === null) { return true; }
|
||||
item.user = escapeHtml(item.user);
|
||||
item.call = escapeHtml(item.call);
|
||||
item.task = '<code>' + item.task + '</code>';
|
||||
item.type = '<span class="label label-' + item.type + '">' + item.type + '</span>';
|
||||
});
|
||||
|
|
Loading…
Reference in New Issue