Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[security] prevent XSS on FAB list views #1125

Merged
merged 2 commits into from
Sep 16, 2016
Merged

Conversation

mistercrunch
Copy link
Member

@@ -182,7 +183,7 @@ def datasource_link(self):
if self.table:
return self.table.link
elif self.druid_datasource:
return self.druid_datasource.link
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

is it intended?

@bkyryliuk
Copy link
Member

Looks good, just a minor comment, looks like return self.druid_datasource.link should stay.


@renders('changed_on')
def modified(self):
s = humanize.naturaltime(datetime.now() - self.changed_on)
return '<span class="no-wrap">{}</nobr>'.format(s)
return Markup('<span class="no-wrap">{}</nobr>'.format(s))
Copy link
Contributor

@xrmx xrmx Sep 16, 2016

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

what is this </nobr>?

@bkyryliuk
Copy link
Member

LGTM

@mistercrunch mistercrunch merged commit b62d7e3 into apache:master Sep 16, 2016
dennisobrien pushed a commit to dennisobrien/caravel that referenced this pull request Sep 19, 2016
* [security] prevent XSS on FAB list views

* addressing comments
@nytai nytai mentioned this pull request Nov 6, 2019
12 tasks
zhaoyongjie pushed a commit to zhaoyongjie/incubator-superset that referenced this pull request Nov 17, 2021
* fix(plugin-chart-echarts): wip treemap improvements

* fix(plugin-chart-echarts): show % of parent on the tooltip

* fix(plugin-chart-echarts): remove some unuse code

* fix(plugin-chart-echarts): fix order by clause

* fix(plugin-chart-echarts): change metrics to metric

* fix(plugin-chart-echarts): ci
zhaoyongjie pushed a commit to zhaoyongjie/incubator-superset that referenced this pull request Nov 24, 2021
* fix(plugin-chart-echarts): wip treemap improvements

* fix(plugin-chart-echarts): show % of parent on the tooltip

* fix(plugin-chart-echarts): remove some unuse code

* fix(plugin-chart-echarts): fix order by clause

* fix(plugin-chart-echarts): change metrics to metric

* fix(plugin-chart-echarts): ci
zhaoyongjie pushed a commit to zhaoyongjie/incubator-superset that referenced this pull request Nov 25, 2021
* fix(plugin-chart-echarts): wip treemap improvements

* fix(plugin-chart-echarts): show % of parent on the tooltip

* fix(plugin-chart-echarts): remove some unuse code

* fix(plugin-chart-echarts): fix order by clause

* fix(plugin-chart-echarts): change metrics to metric

* fix(plugin-chart-echarts): ci
zhaoyongjie pushed a commit to zhaoyongjie/incubator-superset that referenced this pull request Nov 26, 2021
* fix(plugin-chart-echarts): wip treemap improvements

* fix(plugin-chart-echarts): show % of parent on the tooltip

* fix(plugin-chart-echarts): remove some unuse code

* fix(plugin-chart-echarts): fix order by clause

* fix(plugin-chart-echarts): change metrics to metric

* fix(plugin-chart-echarts): ci
@mistercrunch mistercrunch added 🏷️ bot A label used by `supersetbot` to keep track of which PR where auto-tagged with release labels 🚢 0.11.0 labels Feb 19, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
🏷️ bot A label used by `supersetbot` to keep track of which PR where auto-tagged with release labels 🚢 0.11.0
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants