eduvia/lms
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge pull request #622 from pateljannat/issues

Browse Source 
fix: sanitized inputs for people and course creation page
This commit is contained in:
Jannat Patel
2023-09-25 22:49:25 +05:30
committed by GitHub
parent 1c0644aa7a 5727b7cd73
commit 5614a6203f
2 changed files with 12 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
lms/www/courses/create.js
View File

@@ -51,8 +51,13 @@ const create_tag = (e) => {
if ($(e.target).val() == "") {
return;
}
let tag_value = $(e.target)
.val()
.replace(/</g, "&lt;")
.replace(/>/g, "&gt;");
let tag = `<button class="btn btn-secondary btn-sm mr-2 text-uppercase">
${$(e.target).val()}
${tag_value}
<span class="btn-remove">
<svg class="icon icon-sm">
<use class="" href="#icon-close"></use>

7
lms/www/people/index.js
View File

@@ -36,7 +36,12 @@ const search = (e) => {
$("#load-more").removeClass("hide");
else $("#search-empty-state").removeClass("hide");
$(".member-parent").append(data.message.user_details);
let user_details = data.message.user_details;
user_details
.replace(/&/g, "&amp;")
.replace(/</g, "&lt;")
.replace(/"/g, "&quot;");
$(".member-parent").append(user_details);
update_load_more_state(data);
},
});