Enforce escaping on all template content

2019-09-23 14:22:00 +01:00
parent 5f378a39ea
commit deb9b62c7f
77 changed files with 392 additions and 387 deletions
--- a/share/views/ajax/report/deviceaddrnodns.tt
+++ b/share/views/ajax/report/deviceaddrnodns.tt
@@ -13,11 +13,11 @@
 $(document).ready(function() {
  var table = $('#data-table').dataTable({
    "deferRender": true,
-    "data": [% results %],
+    "data": [% results | none %],
    "columns": [{
        "data": 'ip',
        "render": function(data, type, row, meta) {
-          return '<a href="[% search_device %]&q=' + encodeURIComponent(data) + '">' + he.encode(row.dns || row.name || row.ip) + '</a>';
+          return '<a href="[% search_device | none %]&q=' + encodeURIComponent(data) + '">' + he.encode(row.dns || row.name || row.ip) + '</a>';
        }
      }, {
        "data": 'alias',