[Web] Escape To field in Rspamd history log

mailcow · Oct 18, 2020 · 5ead886 · 5ead886
1 parent 41d85db
commit 5ead886
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/data/web/js/site/debug.js b/data/web/js/site/debug.js
@@ -514,10 +514,10 @@ jQuery(function($){
     if (table == 'rspamd_history') {
     $.each(data, function (i, item) {
       if (item.rcpt_mime != "") {
-        item.rcpt = item.rcpt_mime.join(", ");
+        item.rcpt = escapeHtml(item.rcpt_mime.join(", "));
       }
       else {
-        item.rcpt = item.rcpt_smtp.join(", ");
+        item.rcpt = escapeHtml(item.rcpt_smtp.join(", "));
       }
       item.symbols = Object.keys(item.symbols).sort(function (a, b) {
         if (item.symbols[a].score === 0) return 1