浏览代码

HUE-9382 Possible Script Execution on Add/Sync LDAP users (asnaik) (#1189)

* HUE-9382 Possible Script Execution on Add/Sync LDAP users (asnaik)

* HUE-9382 Possible Script Execution on Add/Sync LDAP users -Review Comments(asnaik)

* HUE-9382 Possible Script Execution on Add/Sync LDAP users -Review Comments(asnaik)

* HUE-9382 Possible Script Execution on Add/Sync LDAP users -Review Comments(asnaik)

Co-authored-by: Akhil Naik <asnaik@cloudere.com>
Asnaik HWX 5 年之前
父节点
当前提交
70c3224075
共有 1 个文件被更改,包括 1 次插入1 次删除
  1. 1 1
      apps/useradmin/src/useradmin/templates/layout.mako

+ 1 - 1
apps/useradmin/src/useradmin/templates/layout.mako

@@ -113,7 +113,7 @@ def is_selected(section, matcher):
           $el.closest('.control-group').addClass('error');
           $el.closest('.control-group').addClass('error');
           var html = '<span class="help-inline"><ul class="errorlist">';
           var html = '<span class="help-inline"><ul class="errorlist">';
           e.message.forEach(function (message) {
           e.message.forEach(function (message) {
-            html += '<li>' + message + '</li>';
+            html += '<li>' + hueUtils.escapeOutput(message) + '</li>';
           });
           });
           html += '</ul></span>';
           html += '</ul></span>';
           $el.after(html);
           $el.after(html);