[pve-devel] applied: [PATCH widget-toolkit] add missing htmlEncodes

Thomas Lamprecht t.lamprecht at proxmox.com
Wed May 6 17:03:47 CEST 2020


On 4/30/20 4:03 PM, Dominik Csapak wrote:
> username can include some special characters, so we have
> to escape them
> 
> Signed-off-by: Dominik Csapak <d.csapak at proxmox.com>
> ---
>  window/TaskViewer.js | 4 +++-
>  1 file changed, 3 insertions(+), 1 deletion(-)
> 
> diff --git a/window/TaskViewer.js b/window/TaskViewer.js
> index 347542e..bbbf716 100644
> --- a/window/TaskViewer.js
> +++ b/window/TaskViewer.js
> @@ -127,6 +127,7 @@ Ext.define('Proxmox.window.TaskViewer', {
>  	    },
>  	    user: {
>  		header: gettext('User name'),
> +		renderer: Ext.String.htmlEncode,
>  		required: true
>  	    },
>  	    node: {
> @@ -146,7 +147,8 @@ Ext.define('Proxmox.window.TaskViewer', {
>  		renderer: Proxmox.Utils.render_timestamp
>  	    },
>  	    upid: {
> -		header: gettext('Unique task ID')
> +		header: gettext('Unique task ID'),
> +		renderer: Ext.String.htmlEncode,
>  	    }
>  	};
>  
> 

applied, thanks!




More information about the pve-devel mailing list