avoid CSS vulnerability in Job Queue page

2023-06-28 11:26:43 +01:00
parent 6375989bd5
commit 39562e0633
3 changed files with 5 additions and 4 deletions
--- a/share/views/js/admintask.js
+++ b/share/views/js/admintask.js
@@ -184,7 +184,7 @@
      $(this).qtip({
        overwrite: false,
        content: {
-          attr: 'data-content'
+          text: $('<span/>').text( $(this).attr("data-content") ).html()
        },
        show: {
          event: event.type,