Enforce escaping on all template content

2019-09-23 14:22:00 +01:00
parent 5f378a39ea
commit deb9b62c7f
77 changed files with 392 additions and 387 deletions
--- a/share/views/ajax/report/portutilization.tt
+++ b/share/views/ajax/report/portutilization.tt
@@ -14,12 +14,12 @@
 $(document).ready(function() {
    var table = $('#data-table').dataTable({
        "deferRender": true,
-        "data": [% results %],
+        "data": [% results | none %],
        "columns": [
           {
                "data": 'ip',
                "render": function(data, type, row, meta) {
-                    return '<a href="[% device_ports %]&q=' + encodeURIComponent(data) + '">' + he.encode(row.dns || row.ip) + '</a>';
+                    return '<a href="[% device_ports | none %]&q=' + encodeURIComponent(data) + '">' + he.encode(row.dns || row.ip) + '</a>';
                }
            }, {
                "data": 'port_count',