jaculabilis/danbooru
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Fix #3139: XSS in Related Tags javascript.

Browse Source
This commit is contained in:
evazion
2017-06-09 20:33:19 -05:00
parent 30fc9c93c3
commit 5f9fce7343
1 changed files with 2 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
app/assets/javascripts/related_tag.js
View File

@@ -227,14 +227,10 @@
if (text.match(/^ http/)) { if (text.match(/^ http/)) {
text = text.substring(1, 1000); text = text.substring(1, 1000);
var $url = $("<a/>"); var $url = $("<a/>");
$url.text("open"); $url.text(text);
$url.attr("href", text); $url.attr("href", text);
$url.attr("target", "_blank"); $url.attr("target", "_blank");
var $li = $("<li/>"); $ul.append($("<li/>").html($url));
$li.append(text + " [");
$li.append($url);
$li.append("]");
$ul.append($li);
} else { } else {
$ul.append($("<li/>").text(text)); $ul.append($("<li/>").text(text));
} }