IntenseWebs/grafana
3
0
Fork 0
mirror of https://github.com/grafana/grafana.git synced 2025-02-25 18:55:37 -06:00
Code Issues Packages Projects Releases Wiki Activity

XSS: Fixed history XSS issue (#22680)

Browse Source
This commit is contained in:
Torkel Ödegaard 2020-03-10 14:56:27 +01:00 committed by GitHub
parent cd012bdfb4
commit da37f4c83f
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 5 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
pkg/components/dashdiffs/formatter_basic.go
View File

@ -339,11 +339,11 @@ var (
<!-- Overview -->
{{ if .Old }}
<div class="diff-label">{{ .Old }}</div>
<div class="diff-label" ng-non-bindable>{{ .Old }}</div>
<i class="diff-arrow fa fa-long-arrow-right"></i>
{{ end }}
{{ if .New }}
<div class="diff-label">{{ .New }}</div>
<div class="diff-label" ng-non-bindable>{{ .New }}</div>
{{ end }}
{{ if .LineStart }}
@ -380,11 +380,11 @@ var (
<div class="diff-change-item">
{{ if .Old }}
<div class="diff-label">{{ .Old }}</div>
<div class="diff-label" ng-non-bindable>{{ .Old }}</div>
<i class="diff-arrow fa fa-long-arrow-right"></i>
{{ end }}
{{ if .New }}
<div class="diff-label">{{ .New }}</div>
<div class="diff-label" ng-non-bindable>{{ .New }}</div>
{{ end }}
</div>

2
pkg/components/dashdiffs/formatter_json.go
View File

@ -59,7 +59,7 @@ var (
<span class="diff-line-number">
{{if .RightLine }}{{ .RightLine }}{{ end }}
</span>
<span class="diff-value diff-indent-{{ .Indent }}" title="{{ .Text }}">
<span class="diff-value diff-indent-{{ .Indent }}" title="{{ .Text }}" ng-non-bindable>
{{ .Text }}
</span>
<span class="diff-line-icon">{{ ctos .Change }}</span>