Try to fix XSRF warnings

https://github.com/Worklytics/appengine-pipelines/security/code-scanning/5
Worklytics · May 20, 2024 · c57b06e · c57b06e
1 parent 04ee817
commit c57b06e
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 1 deletion.
diff --git a/java/src/main/resources/ui/root_list.html b/java/src/main/resources/ui/root_list.html
@@ -11,6 +11,7 @@
   <script type="text/javascript" src="jquery.timeago.js"></script>
   <script type="text/javascript" src="jquery.ba-hashchange.min.js"></script>
   <script type="text/javascript" src="jquery.json.min.js"></script>
+  <script type="text/javascript" src="lodash.4.17.15.js"></script>
   <script type="text/javascript" src="common.js"></script>
   <script type="text/javascript" src="list.js"></script>
   <script type="text/javascript">

diff --git a/java/src/main/resources/ui/root_list.js b/java/src/main/resources/ui/root_list.js
@@ -23,7 +23,7 @@ function initRootList() {
   setButter('Loading root jobs...');
   $.ajax({
     type: 'GET',
-    url: 'rpc/list' + window.location.search,
+    url: 'rpc/list' + _.escape(window.location.search),
     dataType: 'text',
     error: function(request, textStatus) {
       getResponseDataJson(textStatus);