Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Fix code scanning alert issue #1353 #1500

Merged
merged 4 commits into from
Oct 22, 2023
Merged

Fix code scanning alert issue #1353 #1500

Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
7a0ff1f
for checking scan file
JisanAR03 Oct 22, 2023
83190f2
for checking scan file
JisanAR03 Oct 22, 2023
b152478
Fix code scanning alert issue #1353
JisanAR03 Oct 22, 2023
4b9f5a6
Merge branch 'main' into issue---#1353
DonnieBLT Oct 22, 2023
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
14 changes: 11 additions & 3 deletions company/static/company/js/hunt_controller.js
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -40,29 +40,37 @@ function add_prize(){
paid_in_cryptocurrency.checked = false;

const prize_container_child_html = document.createElement('div');
const prize_name_sanitized = prize_data.prize_name.trim().substring(0, 8) + '...'; // Sanitize prize_name
const prize_description_sanitized = prize_data.prize_description.trim().substring(0, 55) + '...'; // Sanitize prize_description
const sanitizedNumberOfWinningProjects = Number(prize_data.number_of_winning_projects); // Sanitize number_of_winning_projects
prize_container_child_html.innerHTML = `
<div class="bg-white rounded-lg shadow-lg p-6 w-72 mr-5">
<h2 class="text-2xl font-bold mb-4 text-gray-800">${prize_data.prize_name.trim(0,8)}...</h2>
<h2 class="text-2xl font-bold mb-4 text-gray-800">${escapeHTML(prize_name_sanitized)}</h2>
<div class="mb-4">
<p class="text-red-500 font-bold">Cash Value (USD)</p>
<p class="text-gray-800">$1000</p>
</div>
<div class="mb-4">
<p class="text-gray-800 font-bold">Number of Winning Projects</p>
<p class="text-gray-600">${prize_data.number_of_winning_projects}</p>
<p class="text-gray-600">${sanitizedNumberOfWinningProjects}</p>
</div>
<div class="mb-4">
<p class="text-gray-800 font-bold">Reward Valid Submission</p>
<p class="text-gray-600">${prize_data.every_valid_submissions}</p>
</div>
<div class="mb-4">
<p class="text-red-500 font-bold">Prize Description</p>
<p class="text-gray-800">${prize_data.prize_description.trim(0,55)}...</p>
<p class="text-gray-800">${escapeHTML(prize_description_sanitized)}</p>
</div>
</div>
`;

list_prize_container.appendChild(prize_container_child_html);
function escapeHTML(unsafeText) {
const div = document.createElement('div');
div.innerText = unsafeText;
return div.innerHTML;
}
}

function cancelForm(){
Expand Down
Loading