Skip to content

N
nexpie-grafana-theme
Commit da37f4c8 by Torkel Ödegaard Committed by GitHub
Options

XSS: Fixed history XSS issue (#22680)

parent cd012bdf
Showing with 5 additions and 5 deletions
pkg/components/dashdiffs/formatter_basic.go
......@@ -339,11 +339,11 @@ var (
<!-- Overview -->
{{ if .Old }}
<div class="diff-label">{{ .Old }}</div>
<div class="diff-label" ng-non-bindable>{{ .Old }}</div>
<i class="diff-arrow fa fa-long-arrow-right"></i>
{{ end }}
{{ if .New }}
<div class="diff-label">{{ .New }}</div>
<div class="diff-label" ng-non-bindable>{{ .New }}</div>
{{ end }}
{{ if .LineStart }}
......@@ -380,11 +380,11 @@ var (
<div class="diff-change-item">
{{ if .Old }}
<div class="diff-label">{{ .Old }}</div>
<div class="diff-label" ng-non-bindable>{{ .Old }}</div>
<i class="diff-arrow fa fa-long-arrow-right"></i>
{{ end }}
{{ if .New }}
<div class="diff-label">{{ .New }}</div>
<div class="diff-label" ng-non-bindable>{{ .New }}</div>
{{ end }}
</div>
......
pkg/components/dashdiffs/formatter_json.go
......@@ -59,7 +59,7 @@ var (
<span class="diff-line-number">
{{if .RightLine }}{{ .RightLine }}{{ end }}
</span>
<span class="diff-value diff-indent-{{ .Indent }}" title="{{ .Text }}">
<span class="diff-value diff-indent-{{ .Indent }}" title="{{ .Text }}" ng-non-bindable>
{{ .Text }}
</span>
<span class="diff-line-icon">{{ ctos .Change }}</span>
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment