diff options
| author | Earl Warren <earl-warren@noreply.codeberg.org> | 2024-09-06 13:58:45 +0200 |
|---|---|---|
| committer | Earl Warren <earl-warren@noreply.codeberg.org> | 2024-09-06 13:58:45 +0200 |
| commit | 71658e29530f275db8f4a431387d334af8e80677 (patch) | |
| tree | 4247bfdfd9fe3cfd912f4a10b4e5bad86989ea5c | |
| parent | Merge pull request '[v8.0/forgejo] i18n: update of translations from Codeberg... (diff) | |
| parent | fix: replace v-html with v-text in branch search inputbox (diff) | |
| download | forgejo-71658e29530f275db8f4a431387d334af8e80677.tar.xz forgejo-71658e29530f275db8f4a431387d334af8e80677.zip | |
Merge pull request '[v8.0/forgejo] replace v-html with v-text in branch search inputbox for XSS protection' (#5247) from bp-v8.0/forgejo-bb8796b into v8.0/forgejov8.0.3
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/5247
Reviewed-by: Earl Warren <earl-warren@noreply.codeberg.org>
| -rw-r--r-- | web_src/js/components/RepoBranchTagSelector.vue | 6 |
1 files changed, 2 insertions, 4 deletions
diff --git a/web_src/js/components/RepoBranchTagSelector.vue b/web_src/js/components/RepoBranchTagSelector.vue index c13af14dea..bfba2037cc 100644 --- a/web_src/js/components/RepoBranchTagSelector.vue +++ b/web_src/js/components/RepoBranchTagSelector.vue @@ -289,13 +289,11 @@ export default sfc; // activate IDE's Vue plugin <a href="#" @click="createNewBranch()"> <div v-show="shouldCreateTag"> <i class="reference tags icon"/> - <!-- eslint-disable-next-line vue/no-v-html --> - <span v-html="textCreateTag.replace('%s', searchTerm)"/> + <span v-text="textCreateTag.replace('%s', searchTerm)"/> </div> <div v-show="!shouldCreateTag"> <svg-icon name="octicon-git-branch"/> - <!-- eslint-disable-next-line vue/no-v-html --> - <span v-html="textCreateBranch.replace('%s', searchTerm)"/> + <span v-text="textCreateBranch.replace('%s', searchTerm)"/> </div> <div class="text small"> <span v-if="isViewBranch || release">{{ textCreateBranchFrom.replace('%s', branchName) }}</span> |