taiga
/
taiga-front
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

fix related task edit xss

stable
Juanfran 2016-08-10 12:17:52 +02:00
parent f4c2afebef
commit 4a2ee578b4
2 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
app/coffee/modules/related-tasks.coffee
View File

@ -55,6 +55,8 @@ RelatedTaskRowDirective = ($repo, $compile, $confirm, $rootscope, $loading, $tem
renderEdit = (task) -> renderEdit = (task) ->
$el.html($compile(templateEdit({task: task}))($scope)) $el.html($compile(templateEdit({task: task}))($scope))
$el.find(".task-name input").val(task.subject)
$el.on "keyup", "input", (event) -> $el.on "keyup", "input", (event) ->
if event.keyCode == 13 if event.keyCode == 13
saveTask($model.$modelValue).then -> saveTask($model.$modelValue).then ->

1
app/partials/task/related-task-row-edit.jade
View File

@ -1,7 +1,6 @@
.task-name .task-name
input( input(
type='text' type='text'
value!='<%- task.subject %>'
placeholder="{{'TASK.PLACEHOLDER_SUBJECT' | translate}}" placeholder="{{'TASK.PLACEHOLDER_SUBJECT' | translate}}"
) )
.task-settings .task-settings