diff options
| author | Jo-Philipp Wich <jo@mein.io> | 2023-01-13 20:52:17 +0100 |
|---|---|---|
| committer | Jo-Philipp Wich <jo@mein.io> | 2023-01-13 21:18:09 +0100 |
| commit | 0186d7eae0e123a409e9919a83fdfecc7945c984 (patch) | |
| tree | 89427e947d41ecbec5aa6bf91b3bd87d1c353a89 /modules/luci-mod-system/htdocs | |
| parent | 9634086efc6d58224899037c92c896ab27373d8a (diff) | |
luci-mod-system: fix potential stored XSS
Make sure to escape the key contents in the delete confirmation dialog.
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
Diffstat (limited to 'modules/luci-mod-system/htdocs')
| -rw-r--r-- | modules/luci-mod-system/htdocs/luci-static/resources/view/system/sshkeys.js | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/modules/luci-mod-system/htdocs/luci-static/resources/view/system/sshkeys.js b/modules/luci-mod-system/htdocs/luci-static/resources/view/system/sshkeys.js index df3e354e37..a1748ad990 100644 --- a/modules/luci-mod-system/htdocs/luci-static/resources/view/system/sshkeys.js +++ b/modules/luci-mod-system/htdocs/luci-static/resources/view/system/sshkeys.js @@ -204,7 +204,7 @@ function removeKey(ev) { L.showModal(_('Delete key'), [ E('div', _('Do you really want to delete the following SSH key?')), - E('pre', delkey), + E('pre', [ delkey ]), E('div', { class: 'right' }, [ E('div', { class: 'btn', click: L.hideModal }, _('Cancel')), ' ', |