Merge pull request 'replace v-html with v-text in branch search inputbox for XSS protection' (#5244) from earl-warren/forgejo:wip-xss into forgejo
Some checks failed
/ release (push) Waiting to run
testing / backend-checks (push) Waiting to run
testing / frontend-checks (push) Waiting to run
testing / test-unit (push) Blocked by required conditions
testing / test-remote-cacher (map[image:docker.io/bitnami/redis:7.2 port:6379]) (push) Blocked by required conditions
testing / test-remote-cacher (map[image:docker.io/bitnami/valkey:7.2 port:6379]) (push) Blocked by required conditions
testing / test-remote-cacher (map[image:ghcr.io/microsoft/garnet-alpine:1.0.14 port:6379]) (push) Blocked by required conditions
testing / test-remote-cacher (map[image:registry.redict.io/redict:7.3.0-scratch port:6379]) (push) Blocked by required conditions
testing / test-mysql (push) Blocked by required conditions
testing / test-pgsql (push) Blocked by required conditions
testing / test-sqlite (push) Blocked by required conditions
testing / security-check (push) Blocked by required conditions
Integration tests for the release process / release-simulation (push) Has been cancelled

Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/5244
Reviewed-by: Gusted <gusted@noreply.codeberg.org>
This commit is contained in:
Earl Warren 2024-09-06 10:37:06 +00:00
commit 6114356dff

View file

@ -289,13 +289,11 @@ export default sfc; // activate IDE's Vue plugin
<a href="#" @click="createNewBranch()"> <a href="#" @click="createNewBranch()">
<div v-show="shouldCreateTag"> <div v-show="shouldCreateTag">
<i class="reference tags icon"/> <i class="reference tags icon"/>
<!-- eslint-disable-next-line vue/no-v-html --> <span v-text="textCreateTag.replace('%s', searchTerm)"/>
<span v-html="textCreateTag.replace('%s', searchTerm)"/>
</div> </div>
<div v-show="!shouldCreateTag"> <div v-show="!shouldCreateTag">
<svg-icon name="octicon-git-branch"/> <svg-icon name="octicon-git-branch"/>
<!-- eslint-disable-next-line vue/no-v-html --> <span v-text="textCreateBranch.replace('%s', searchTerm)"/>
<span v-html="textCreateBranch.replace('%s', searchTerm)"/>
</div> </div>
<div class="text small"> <div class="text small">
<span v-if="isViewBranch || release">{{ textCreateBranchFrom.replace('%s', branchName) }}</span> <span v-if="isViewBranch || release">{{ textCreateBranchFrom.replace('%s', branchName) }}</span>