CGM_Public/pretix_cgo
1
0
Fork 0
forked from CGM_Public/pretix_original
Code Pull Requests Actions Activity

[SECURITY] Fix XSS in global admin mode

Browse Source
This commit is contained in:
Raphael Michel
2019-07-10 14:52:58 +02:00
parent eaf6da7272
commit 6d6cd3b7cf
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
src/pretix/static/pretixcontrol/js/ui/main.js
View File

@@ -632,9 +632,9 @@ $(function () {
}
$.getJSON(url + '?pk=' + id, function (data) {
if ($a.parent().tagName === "p") {
$("<pre>").html(JSON.stringify(data.data, null, 2)).insertAfter($a.parent());
$("<pre>").text(JSON.stringify(data.data, null, 2)).insertAfter($a.parent());
} else {
$("<pre>").html(JSON.stringify(data.data, null, 2)).appendTo($a.parent());
$("<pre>").text(JSON.stringify(data.data, null, 2)).appendTo($a.parent());
}
$a.remove();
});