Fixed XSS issue with file based dashboards, was really casued by an issue with alertSrv accepting html in message alerts

This commit is contained in:
Torkel Ödegaard
2015-04-29 15:50:47 +02:00
parent 5175cf70ef
commit d10ce90936
3 changed files with 3 additions and 3 deletions

View File

@@ -76,7 +76,7 @@ function (angular, _, kbn, moment, $) {
}
return result.data;
},function() {
$scope.appEvent('alert-error', ["Dashboard load failed", "Could not load <i>dashboards/"+file+"</i>. Please make sure it exists"]);
$scope.appEvent('alert-error', ["Dashboard load failed", "Could not load "+file+". Please make sure it exists"]);
return false;
});
};