magic_rb/forgejo
Template
1
0
Fork 0
mirror of https://codeberg.org/forgejo/forgejo synced 2024-11-25 11:16:11 +01:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request '[v7.0/forgejo] replace v-html with v-text in branch search inputbox for XSS protection' (#5246) from bp-v7.0/forgejo-bb8796b into v7.0/forgejo

Browse source 
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/5246
Reviewed-by: Earl Warren <earl-warren@noreply.codeberg.org>
This commit is contained in:
Earl Warren 2024-09-06 11:15:13 +00:00
parent 367ccad622 bb811ee28a
commit 7644435aed
1 changed files with 2 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
web_src/js/components/RepoBranchTagSelector.vue
View file

@ -289,13 +289,11 @@ export default sfc; // activate IDE's Vue plugin
<a href="#" @click="createNewBranch()"> <a href="#" @click="createNewBranch()">
<div v-show="shouldCreateTag"> <div v-show="shouldCreateTag">
<i class="reference tags icon"/> <i class="reference tags icon"/>
<!-- eslint-disable-next-line vue/no-v-html --> <span v-text="textCreateTag.replace('%s', searchTerm)"/>
<span v-html="textCreateTag.replace('%s', searchTerm)"/>
</div> </div>
<div v-show="!shouldCreateTag"> <div v-show="!shouldCreateTag">
<svg-icon name="octicon-git-branch"/> <svg-icon name="octicon-git-branch"/>
<!-- eslint-disable-next-line vue/no-v-html --> <span v-text="textCreateBranch.replace('%s', searchTerm)"/>
<span v-html="textCreateBranch.replace('%s', searchTerm)"/>
</div> </div>
<div class="text small"> <div class="text small">
<span v-if="isViewBranch || release">{{ textCreateBranchFrom.replace('%s', branchName) }}</span> <span v-if="isViewBranch || release">{{ textCreateBranchFrom.replace('%s', branchName) }}</span>