opensource/grafana
1
0
Fork 0
mirror of https://github.com/grafana/grafana.git synced 2025-07-31 22:52:45 +08:00
Code Issues Packages Projects Releases Wiki Activity

XSS: Fixed history XSS issue (#22680)

Browse Source
This commit is contained in:
Torkel Ödegaard
2020-03-10 14:56:27 +01:00
committed by GitHub
parent cd012bdfb4
commit da37f4c83f
2 changed files with 5 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
pkg/components/dashdiffs/formatter_basic.go
View File

@ -339,11 +339,11 @@ var (
<!-- Overview --> <!-- Overview -->
{{ if .Old }} {{ if .Old }}
<div class="diff-label">{{ .Old }}</div> <div class="diff-label" ng-non-bindable>{{ .Old }}</div>
<i class="diff-arrow fa fa-long-arrow-right"></i> <i class="diff-arrow fa fa-long-arrow-right"></i>
{{ end }} {{ end }}
{{ if .New }} {{ if .New }}
<div class="diff-label">{{ .New }}</div> <div class="diff-label" ng-non-bindable>{{ .New }}</div>
{{ end }} {{ end }}
{{ if .LineStart }} {{ if .LineStart }}
@ -380,11 +380,11 @@ var (
<div class="diff-change-item"> <div class="diff-change-item">
{{ if .Old }} {{ if .Old }}
<div class="diff-label">{{ .Old }}</div> <div class="diff-label" ng-non-bindable>{{ .Old }}</div>
<i class="diff-arrow fa fa-long-arrow-right"></i> <i class="diff-arrow fa fa-long-arrow-right"></i>
{{ end }} {{ end }}
{{ if .New }} {{ if .New }}
<div class="diff-label">{{ .New }}</div> <div class="diff-label" ng-non-bindable>{{ .New }}</div>
{{ end }} {{ end }}
</div> </div>

2
pkg/components/dashdiffs/formatter_json.go
View File

@ -59,7 +59,7 @@ var (
<span class="diff-line-number"> <span class="diff-line-number">
{{if .RightLine }}{{ .RightLine }}{{ end }} {{if .RightLine }}{{ .RightLine }}{{ end }}
</span> </span>
<span class="diff-value diff-indent-{{ .Indent }}" title="{{ .Text }}"> <span class="diff-value diff-indent-{{ .Indent }}" title="{{ .Text }}" ng-non-bindable>
{{ .Text }} {{ .Text }}
</span> </span>
<span class="diff-line-icon">{{ ctos .Change }}</span> <span class="diff-line-icon">{{ ctos .Change }}</span>