mirrors/calibre-web
1
0
Fork 0
mirror of https://github.com/janeczku/calibre-web synced 2025-10-31 07:13:02 +00:00
Code Issues Releases Wiki Activity

Removed xss on shelf add/remove action

Browse Source
This commit is contained in:
Ozzie Isaacs
2021-08-30 17:05:53 +02:00
parent 86ef1d47e8
commit c0a06eec46
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
cps/static/js/details.js
View File

@@ -69,7 +69,7 @@ $("#archived_cb").on("change", function() {
templates.remove({
add: this.href,
remove: $this.data("remove-href"),
content: this.textContent
content: $("<div>").text(this.textContent).html()
})
);
break;
@@ -78,7 +78,7 @@ $("#archived_cb").on("change", function() {
templates.add({
add: $this.data("add-href"),
remove: this.href,
content: this.textContent
content: $("<div>").text(this.textContent).html(),
})
);
break;