[PR #305] [MERGED] Fix input issues #303 and #302 #2786

New issue

Closed

opened 2026-03-02 13:55:27 +03:00 by kerem · 0 comments

kerem commented

2026-03-02 13:55:27 +03:00

Owner

📋 Pull Request Information

Original PR: https://github.com/KelvinTegelaar/CIPP/pull/305
Author: @homotechsual
Created: 11/26/2021
Status: ✅ Merged
Merged: 11/26/2021
Merged by: @KelvinTegelaar

Base: dev ← Head: patch-17

📝 Commits (3)

213685a Add escapeHTML function.
060e341 Escape user input.
30b19ed Switch escape to escapeHTML

📊 Changes

3 files changed (+17 additions, -6 deletions)

View changed files

📝 js/UserView.js (+3 -3)
📝 js/datatables/datatablesMailboxMobileDevices.js (+2 -2)
📝 js/scripts.js (+12 -1)

📄 Description

Fixes #303 - XSS in datatablesMailboxMobileDevices.js
Fixes #302 - XSS in userview.js

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/KelvinTegelaar/CIPP/pull/305 **Author:** [@homotechsual](https://github.com/homotechsual) **Created:** 11/26/2021 **Status:** ✅ Merged **Merged:** 11/26/2021 **Merged by:** [@KelvinTegelaar](https://github.com/KelvinTegelaar) **Base:** `dev` ← **Head:** `patch-17` --- ### 📝 Commits (3) - [`213685a`](https://github.com/KelvinTegelaar/CIPP/commit/213685a458f4f0d7a76aaddc194245d27ec3f355) Add escapeHTML function. - [`060e341`](https://github.com/KelvinTegelaar/CIPP/commit/060e341437ad94b55b83f761bef7532dbe5ad835) Escape user input. - [`30b19ed`](https://github.com/KelvinTegelaar/CIPP/commit/30b19ed6f41e0b61f8b5ac982c021d2887823cec) Switch escape to escapeHTML ### 📊 Changes **3 files changed** (+17 additions, -6 deletions) <details> <summary>View changed files</summary> 📝 `js/UserView.js` (+3 -3) 📝 `js/datatables/datatablesMailboxMobileDevices.js` (+2 -2) 📝 `js/scripts.js` (+12 -1) </details> ### 📄 Description Fixes #303 - XSS in `datatablesMailboxMobileDevices.js` Fixes #302 - XSS in `userview.js` --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>

kerem

2026-03-02 13:55:27 +03:00

closed this issue
added the
pull-request
label

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

starred/CIPP#2786

No description provided.

Rows
Columns