Browse Source

Fix encoding of special characters

Special characters would get html encoded (& -> &amp;). This has been tested against several payloads (e.g. <script>alert(0)</script>) to ensure it's not vulnerable to XSS.
adaptive-webui-19844
Tom Piccirello 6 years ago committed by GitHub
parent
commit
368fbd9e7d
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
  1. 2
      src/webui/www/private/rename.html

2
src/webui/www/private/rename.html

@ -33,7 +33,7 @@ @@ -33,7 +33,7 @@
var name = new URI().getData('name');
// set text field to current value
if (name)
$('rename').value = escapeHtml(decodeURIComponent(name));
$('rename').value = decodeURIComponent(name);
$('rename').focus();
$('renameButton').addEvent('click', function(e) {

Loading…
Cancel
Save