taiga
/
taiga-front
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

prevent delete role xss

stable
Juanfran 2016-01-12 08:14:19 +01:00
parent 60e86656ee
commit e2ac1d1470
1 changed files with 5 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
app/coffee/modules/common/confirm.coffee
View File

@ -95,22 +95,23 @@ class ConfirmService extends taiga.Service
el = angular.element(lightboxSelector) el = angular.element(lightboxSelector)
# Render content # Render content
el.find(".title").html(title) el.find(".title").text(title)
el.find(".subtitle").html(subtitle) el.find(".subtitle").text(subtitle)
if replacement if replacement
el.find(".replacement").html(replacement) el.find(".replacement").text(replacement)
else else
el.find(".replacement").remove() el.find(".replacement").remove()
if warning if warning
el.find(".warning").html(warning) el.find(".warning").text(warning)
else else
el.find(".warning").remove() el.find(".warning").remove()
choicesField = el.find(".choices") choicesField = el.find(".choices")
choicesField.html('') choicesField.html('')
_.each choices, (value, key) -> _.each choices, (value, key) ->
value = _.escape(value)
choicesField.append(angular.element("<option value='#{key}'>#{value}</option>")) choicesField.append(angular.element("<option value='#{key}'>#{value}</option>"))
# Assign event handlers # Assign event handlers