gunghogeoduck/osem-fcy
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Sanitize conference color to prevent CSS XSS injection

Browse source 
re: https://hakiri.io/github/openSUSE/osem/master/78eb58c93eb766505dd12319d0502c10b40a811f/warnings/7138485d39fea3
This commit is contained in:
James Mason 2017-10-10 10:22:49 -07:00
parent 741ead5e17
commit 9b5a6ddb5c
No known key found for this signature in database
GPG key ID: 1B3951886C449023
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
app/views/conferences/show.html.haml
View file

@ -82,7 +82,7 @@
- content_for :script_head do - content_for :script_head do
:javascript :javascript
var triangle_tcs = tinycolor("#{@conference.color}").monochromatic(); var triangle_tcs = tinycolor("#{sanitize @conference.color}").monochromatic();
var triangle_colors = triangle_tcs.map(function(t) { return t.toHexString(); }); var triangle_colors = triangle_tcs.map(function(t) { return t.toHexString(); });
$(function () { $(function () {
$(document).ready(function() { $(document).ready(function() {