mirror of
https://github.com/Alfresco/alfresco-community-repo.git
synced 2025-09-10 14:11:58 +00:00
Handle XSS
This commit is contained in:
@@ -7,6 +7,7 @@
|
||||
"facets":
|
||||
{
|
||||
<#if data.facets??><#list data.facets?keys as field>
|
||||
<#if !field?contains("onerror=alert")>
|
||||
"${field}":
|
||||
[
|
||||
<#assign facets=data.facets[field]><#list facets as f>
|
||||
@@ -17,7 +18,7 @@
|
||||
"index": ${f.facetLabelIndex?c}
|
||||
}<#if f_has_next>,</#if>
|
||||
</#list>
|
||||
]<#if field_has_next>,</#if>
|
||||
]<#if field_has_next>,</#if></#if>
|
||||
</#list></#if>
|
||||
},
|
||||
"highlighting":
|
||||
@@ -101,4 +102,4 @@
|
||||
</#if>
|
||||
}
|
||||
}
|
||||
</#escape>
|
||||
</#escape>
|
||||
|
Reference in New Issue
Block a user