infra
/
cryptpad
2
1
Fork 0
Code Issues Pull Requests Projects Releases 1 Activity

Protect againt XSS in tui calendar

pull/1/head
yflory 2021-04-13 11:09:14 +02:00
parent c98dfd29c7
commit 33c9a2d395
1 changed files with 6 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
www/calendar/inner.js
View File

@ -149,7 +149,7 @@ Messages.calendar_dateTimeRange = "{0} {1} - {2}";
if (!md) { return void console.error('Ignore calendar without metadata'); }
return {
id: id,
name: Util.fixHTML(md.title),
name: md.title,
color: getContrast(md.color),
bgColor: md.color,
dragBgColor: md.color,
@ -165,8 +165,8 @@ Messages.calendar_dateTimeRange = "{0} {1} - {2}";
var data = c.content || {};
Object.keys(data.content || {}).forEach(function (uid) {
var obj = data.content[uid];
obj.title = Util.fixHTML(obj.title || "");
obj.location = Util.fixHTML(obj.location || "");
obj.title = obj.title || "";
obj.location = obj.location || "";
if (c.readOnly) {
obj.isReadOnly = true;
}
@ -223,6 +223,9 @@ Messages.calendar_dateTimeRange = "{0} {1} - {2}";
popupSave: function () {
return Messages.settings_save;
},
popupDetailLocation: function(schedule) {
return 'Location : ' + Util.fixHTML(schedule.location); // XXX
},
timegridDisplayTime: getTime,
timegridDisplayPrimaryTime: getTime,
popupDetailDate: function(isAllDay, start, end) {