eduvia/lms
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: sanitized inputs for people and course creation page

Browse Source
This commit is contained in:
Jannat Patel
2023-09-25 22:08:37 +05:30
parent 1c0644aa7a
commit 5727b7cd73
2 changed files with 12 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
lms/www/courses/create.js
View File

@@ -51,8 +51,13 @@ const create_tag = (e) => {
if ($(e.target).val() == "") { if ($(e.target).val() == "") {
return; return;
} }
let tag_value = $(e.target)
.val()
.replace(/</g, "&lt;")
.replace(/>/g, "&gt;");
let tag = `<button class="btn btn-secondary btn-sm mr-2 text-uppercase"> let tag = `<button class="btn btn-secondary btn-sm mr-2 text-uppercase">
${$(e.target).val()} ${tag_value}
<span class="btn-remove"> <span class="btn-remove">
<svg class="icon icon-sm"> <svg class="icon icon-sm">
<use class="" href="#icon-close"></use> <use class="" href="#icon-close"></use>

7
lms/www/people/index.js
View File

@@ -36,7 +36,12 @@ const search = (e) => {
$("#load-more").removeClass("hide"); $("#load-more").removeClass("hide");
else $("#search-empty-state").removeClass("hide"); else $("#search-empty-state").removeClass("hide");
$(".member-parent").append(data.message.user_details); let user_details = data.message.user_details;
user_details
.replace(/&/g, "&amp;")
.replace(/</g, "&lt;")
.replace(/"/g, "&quot;");
$(".member-parent").append(user_details);
update_load_more_state(data); update_load_more_state(data);
}, },
}); });