Browse Source

[Web] Fix XSS in call field

andryyy 6 years ago
parent
commit
fab23cec2b
1 changed files with 1 additions and 0 deletions
  1. 1 0
      data/web/js/site/debug.js

+ 1 - 0
data/web/js/site/debug.js

@@ -572,6 +572,7 @@ jQuery(function($){
         } else {
           item.message = escapeHtml(item.message);
         }
+        item.call = escapeHtml(item.call);
         var danger_class = ["emerg", "alert", "crit", "err"];
         var warning_class = ["warning", "warn"];
         var info_class = ["notice", "info", "debug"];