mirror of
https://github.com/grafana/grafana.git
synced 2025-02-25 18:55:37 -06:00
XSS: Fixed history XSS issue (#22680)
This commit is contained in:
parent
cd012bdfb4
commit
da37f4c83f
@ -339,11 +339,11 @@ var (
|
||||
|
||||
<!-- Overview -->
|
||||
{{ if .Old }}
|
||||
<div class="diff-label">{{ .Old }}</div>
|
||||
<div class="diff-label" ng-non-bindable>{{ .Old }}</div>
|
||||
<i class="diff-arrow fa fa-long-arrow-right"></i>
|
||||
{{ end }}
|
||||
{{ if .New }}
|
||||
<div class="diff-label">{{ .New }}</div>
|
||||
<div class="diff-label" ng-non-bindable>{{ .New }}</div>
|
||||
{{ end }}
|
||||
|
||||
{{ if .LineStart }}
|
||||
@ -380,11 +380,11 @@ var (
|
||||
|
||||
<div class="diff-change-item">
|
||||
{{ if .Old }}
|
||||
<div class="diff-label">{{ .Old }}</div>
|
||||
<div class="diff-label" ng-non-bindable>{{ .Old }}</div>
|
||||
<i class="diff-arrow fa fa-long-arrow-right"></i>
|
||||
{{ end }}
|
||||
{{ if .New }}
|
||||
<div class="diff-label">{{ .New }}</div>
|
||||
<div class="diff-label" ng-non-bindable>{{ .New }}</div>
|
||||
{{ end }}
|
||||
</div>
|
||||
|
||||
|
@ -59,7 +59,7 @@ var (
|
||||
<span class="diff-line-number">
|
||||
{{if .RightLine }}{{ .RightLine }}{{ end }}
|
||||
</span>
|
||||
<span class="diff-value diff-indent-{{ .Indent }}" title="{{ .Text }}">
|
||||
<span class="diff-value diff-indent-{{ .Indent }}" title="{{ .Text }}" ng-non-bindable>
|
||||
{{ .Text }}
|
||||
</span>
|
||||
<span class="diff-line-icon">{{ ctos .Change }}</span>
|
||||
|
Loading…
Reference in New Issue
Block a user