simoon
/
parallel-library
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Fix two minor xss

Browse Source
pull/1335/head
jvoisin 4 years ago
parent 0297823bda
commit 806a5f209f
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File

4
cps/static/js/caliBlur.js
Unescape Escape View File

@ -28,7 +28,7 @@ $( 'body.mailset' ).addClass( 'admin' );
curHref = window.location.href.split('/'); curHref = window.location.href.split('/');
prevHref = document.referrer.split('/'); prevHref = document.referrer.split('/');
$( '.navbar-form.navbar-left' ) $( '.navbar-form.navbar-left' )
.before( '<div class="plexBack"><a href="' + document.referrer + '"></a></div>' ); .before( '<div class="plexBack"><a href="' + encodeURI(document.referrer) + '"></a></div>' );
if ( history.length === 1 || if ( history.length === 1 ||
curHref[0] + curHref[0] +
curHref[1] + curHref[1] +
@ -43,7 +43,7 @@ if ( history.length === 1 ||
//Weird missing a after pressing back from edit. //Weird missing a after pressing back from edit.
setTimeout(function() { setTimeout(function() {
if ( $( '.plexBack a').length < 1 ) { if ( $( '.plexBack a').length < 1 ) {
$( '.plexBack' ).append('<a href="' + document.referrer + '"></a>'); $( '.plexBack' ).append('<a href="' + encodeURI(document.referrer) + '"></a>');
} }
},10); },10);

Write Preview
Loading…
Cancel
Save