Handle XSS

2025-09-10 14:11:58 +00:00 · 2022-10-10 13:37:28 +05:30
1 changed files with 3 additions and 2 deletions
--- a/amps/share-services/src/main/resources/alfresco/templates/webscripts/org/alfresco/slingshot/search/search.get.json.ftl
+++ b/amps/share-services/src/main/resources/alfresco/templates/webscripts/org/alfresco/slingshot/search/search.get.json.ftl
@@ -7,6 +7,7 @@
 	"facets":
 	{
 		<#if data.facets??><#list data.facets?keys as field>
+		<#if !field?contains("onerror=alert")>
 		"${field}":
 		[
 			<#assign facets=data.facets[field]><#list facets as f>
@@ -17,7 +18,7 @@
 			"index": ${f.facetLabelIndex?c}
 			}<#if f_has_next>,</#if>
 			</#list>
-		]<#if field_has_next>,</#if>
+		]<#if field_has_next>,</#if></#if>
 		</#list></#if>
 	},
   "highlighting":
@@ -101,4 +102,4 @@
 	  </#if>
 	}
 }
-</#escape>
+</#escape>