Lanmikeman/openvk
Lanmikeman/openvk
1
1
Fork 0
mirror of https://github.com/openvk/openvk synced 2025-02-25 21:30:14 +03:00
Code Issues Projects Releases Packages Wiki Activity

fix(docs): fix doc editing xss

Browse source
This commit is contained in:
mrilyew 2025-01-22 20:11:09 +03:00
parent 9177075380
commit 67653c7a52
1 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
Web/static/js/al_docs.js
View file

@ -131,7 +131,7 @@ u(document).on('click', '.docMainItem #edit_icon', async (e) => {
title: tr("document_editing_in_general"),
body: `
<p><b>${tr("info_name")}</b></p>
<input maxlength="128" type="text" name="doc_name" value="${doc.title}" placeholder="...">
<input maxlength="128" type="text" name="doc_name" value="${escapeHtml(doc.title)}" placeholder="...">
<label>
<input value="0" type="radio" name="doc_access" ${doc.folder_id != 3 ? "checked" : ''}>
@ -144,7 +144,7 @@ u(document).on('click', '.docMainItem #edit_icon', async (e) => {
</label>
<p><b>${tr("tags")}</b></p>
<input maxlength="256" type="text" name="doc_tags" value="${doc.tags.join(',')}" placeholder="...">
<input maxlength="256" type="text" name="doc_tags" value="${escapeHtml(doc.tags.join(','))}" placeholder="...">
<br>
<label>
<input type="checkbox" name="doc_owner" ${doc.is_hidden ? "checked" : ''}>