diff options
| author | Lauri Ojansivu <x@xet7.org> | 2020-06-08 17:34:45 +0300 |
|---|---|---|
| committer | Lauri Ojansivu <x@xet7.org> | 2020-06-08 17:34:45 +0300 |
| commit | 99f68f36b028d6c75acf2e5b83585b1acee65f97 (patch) | |
| tree | 3d32c585e70d6dc8d6ae07dbf33ecee59299c6e3 /client | |
| parent | 61e682470cdaef42cce2d74b41fb752cfc61848b (diff) | |
| download | wekan-99f68f36b028d6c75acf2e5b83585b1acee65f97.tar.gz wekan-99f68f36b028d6c75acf2e5b83585b1acee65f97.tar.bz2 wekan-99f68f36b028d6c75acf2e5b83585b1acee65f97.zip | |
Fix XSS.
Thanks to xet7 !
Diffstat (limited to 'client')
| -rw-r--r-- | client/components/rules/actions/cardActions.jade | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/client/components/rules/actions/cardActions.jade b/client/components/rules/actions/cardActions.jade index 469c1c50..0840283b 100644 --- a/client/components/rules/actions/cardActions.jade +++ b/client/components/rules/actions/cardActions.jade @@ -75,7 +75,7 @@ template(name="cardActions") button.trigger-button.trigger-button-color.js-show-color-palette( id="color-action" class="card-details-{{cardColorButton}}") - | {{{_ cardColorButtonText }}} // XSS?! + | {{_ cardColorButtonText }} div.trigger-button.js-set-color-action.js-goto-rules i.fa.fa-plus |