135/netdisco
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

avoid CSS vulnerability in Job Queue page

Browse Source
This commit is contained in:
Oliver Gorwits
2023-06-28 11:26:43 +01:00
parent 6375989bd5
commit 39562e0633
3 changed files with 5 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
share/public/css/netdisco.css
View File

@@ -103,8 +103,9 @@ div.content > div.tab-content table.nd_floatinghead thead {
} }
.qtip-content { .qtip-content {
padding-bottom: 0px; font-size: 15px;
line-height: 8px; font-family: monospace;
white-space: pre;
} }
/* for where min-width is set but we don't want it */ /* for where min-width is set but we don't want it */

2
share/views/ajax/admintask/jobqueue.tt
View File

@@ -22,7 +22,7 @@
[% ' class="nd_jobqueueitem success"' IF row.status == 'done' %] [% ' class="nd_jobqueueitem success"' IF row.status == 'done' %]
[% ' class="nd_jobqueueitem error"' IF row.status == 'error' %] [% ' class="nd_jobqueueitem error"' IF row.status == 'error' %]
[% ' class="nd_jobqueueitem info"' IF row.status.search('^queued-') %] [% ' class="nd_jobqueueitem info"' IF row.status.search('^queued-') %]
data-content="<pre>[% row.log | html_entity %]</pre>" data-content="[% row.log | html_entity %]"
> >
<td class="nd_center-cell">[% row.entered_stamp | html_entity %]</td> <td class="nd_center-cell">[% row.entered_stamp | html_entity %]</td>
<td class="nd_center-cell"> <td class="nd_center-cell">

2
share/views/js/admintask.js
View File

@@ -184,7 +184,7 @@
$(this).qtip({ $(this).qtip({
overwrite: false, overwrite: false,
content: { content: {
attr: 'data-content' text: $('<span/>').text( $(this).attr("data-content") ).html()
}, },
show: { show: {
event: event.type, event: event.type,