Skip to content
Permalink
Browse files Browse the repository at this point in the history
fix: [security] Stored XSS when viewing galaxy cluster elements in JS…
…ON format
  • Loading branch information
mokaddem committed Jul 29, 2021
1 parent b961954 commit f318f7c
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion app/View/GalaxyElements/ajax/index.ctp
Expand Up @@ -83,7 +83,7 @@ if ($context == 'JSONView') {

echo $this->element('/genericElements/IndexTable/index_table', $indexOptions);
if ($context == 'JSONView') {
echo sprintf('<div id="elementJSONDiv" class="well well-small">%s</div>', json_encode($JSONElements));
echo sprintf('<div id="elementJSONDiv" class="well well-small">%s</div>', json_encode(h($JSONElements)));
}
?>

Expand Down

0 comments on commit f318f7c

Please sign in to comment.