[pve-devel] [PATCH widget-toolkit] add missing htmlEncodes

Dominik Csapak d.csapak at proxmox.com
Thu Apr 30 16:03:57 CEST 2020


username can include some special characters, so we have
to escape them

Signed-off-by: Dominik Csapak <d.csapak at proxmox.com>
---
 window/TaskViewer.js | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/window/TaskViewer.js b/window/TaskViewer.js
index 347542e..bbbf716 100644
--- a/window/TaskViewer.js
+++ b/window/TaskViewer.js
@@ -127,6 +127,7 @@ Ext.define('Proxmox.window.TaskViewer', {
 	    },
 	    user: {
 		header: gettext('User name'),
+		renderer: Ext.String.htmlEncode,
 		required: true
 	    },
 	    node: {
@@ -146,7 +147,8 @@ Ext.define('Proxmox.window.TaskViewer', {
 		renderer: Proxmox.Utils.render_timestamp
 	    },
 	    upid: {
-		header: gettext('Unique task ID')
+		header: gettext('Unique task ID'),
+		renderer: Ext.String.htmlEncode,
 	    }
 	};
 
-- 
2.20.1





More information about the pve-devel mailing list