shaba/awx
1
0
Fork 0
mirror of https://github.com/ansible/awx.git synced 2024-11-01 16:51:11 +03:00
Code Releases Activity

Fixed XSS for project and jt scheduling

Browse Source 
#2148
This commit is contained in:
Akita Noek 2016-06-03 14:50:35 -04:00
parent b999206ffd
commit ab126b1040
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
awx/ui/client/src/scheduler/scheduler.controller.js
View File

@ -55,8 +55,8 @@ export default [
schedList.well = true;
// include name of item in listTitle
schedList.listTitle = title ? title : parentObject.name;
schedList.listTitle = `${schedList.listTitle}<div class='List-titleLockup'></div>Schedules`;
let escaped_title = $("<span>").text(title ? title : parentObject.name)[0].innerHTML
schedList.listTitle = `${escaped_title}<div class='List-titleLockup'></div>Schedules`;
schedList.basePath = parentObject.url + "schedules";