mirror/opensourcepos
1
0 Fork 0
mirror of https://github.com/opensourcepos/opensourcepos.git synced 2026-10-10 11:35:11 -04:00
Code Issues Packages Projects Releases Wiki Activity

Fix XSS vulnerability in attributes (#3965)

Browse Source
This commit is contained in:
jekkos committed 2026-03-03 22:28:32 +01:00
1 parent 79427481b3
commit b93359bcaf
1 file changed
+1 -1
Download Patch File Download Diff File Expand all files Collapse all files
app/Views/attributes/form.php
+1 -1
View File
@@ -192,7 +192,7 @@
}
}
$('#definition_list_group').append('<li class="list-group-item">' + value + '<a href="javascript:void(0);"><span class="glyphicon glyphicon-trash pull-right"></span></a></li>')
$('#definition_list_group').append('<li class="list-group-item">' + DOMPurify.sanitize(value) + '<a href="javascript:void(0);"><span class="glyphicon glyphicon-trash pull-right"></span></a></li>')
.find(':last-child a').click(remove_attribute_value);
$('#definition_value').val('');
};