self-hosted/mailcow-dockerized
1
0
Fork 0
mirror of https://github.com/mailcow/mailcow-dockerized.git synced 2025-01-20 04:59:27 +02:00
Code Issues Releases Activity

[Web] Fix XSS in call field

Browse Source
This commit is contained in:
andryyy 2019-08-13 21:12:24 +02:00
parent c42c7a7189
commit fab23cec2b
No known key found for this signature in database
GPG Key ID: 8EC34FF2794E25EF
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
data/web/js/site/debug.js
View File

@ -572,6 +572,7 @@ jQuery(function($){
} else {
item.message = escapeHtml(item.message);
}
item.call = escapeHtml(item.call);
var danger_class = ["emerg", "alert", "crit", "err"];
var warning_class = ["warning", "warn"];
var info_class = ["notice", "info", "debug"];