Эх сурвалжийг харах

HUE-9382 Possible Script Execution on Add/Sync LDAP users (asnaik) (#1189)

* HUE-9382 Possible Script Execution on Add/Sync LDAP users (asnaik)

* HUE-9382 Possible Script Execution on Add/Sync LDAP users -Review Comments(asnaik)

* HUE-9382 Possible Script Execution on Add/Sync LDAP users -Review Comments(asnaik)

* HUE-9382 Possible Script Execution on Add/Sync LDAP users -Review Comments(asnaik)

Co-authored-by: Akhil Naik <asnaik@cloudere.com>
Asnaik HWX 5 жил өмнө
parent
commit
70c3224075

+ 1 - 1
apps/useradmin/src/useradmin/templates/layout.mako

@@ -113,7 +113,7 @@ def is_selected(section, matcher):
           $el.closest('.control-group').addClass('error');
           var html = '<span class="help-inline"><ul class="errorlist">';
           e.message.forEach(function (message) {
-            html += '<li>' + message + '</li>';
+            html += '<li>' + hueUtils.escapeOutput(message) + '</li>';
           });
           html += '</ul></span>';
           $el.after(html);