1
0
mirror of https://github.com/ansible/awx.git synced 2024-11-02 01:21:21 +03:00

Fixed XSS for project and jt scheduling

#2148
This commit is contained in:
Akita Noek 2016-06-03 14:50:35 -04:00
parent b999206ffd
commit ab126b1040

View File

@ -55,8 +55,8 @@ export default [
schedList.well = true; schedList.well = true;
// include name of item in listTitle // include name of item in listTitle
schedList.listTitle = title ? title : parentObject.name; let escaped_title = $("<span>").text(title ? title : parentObject.name)[0].innerHTML
schedList.listTitle = `${schedList.listTitle}<div class='List-titleLockup'></div>Schedules`; schedList.listTitle = `${escaped_title}<div class='List-titleLockup'></div>Schedules`;
schedList.basePath = parentObject.url + "schedules"; schedList.basePath = parentObject.url + "schedules";