Skip to content

Commit

Permalink
luci-mod-system: fix potential stored XSS
Browse files Browse the repository at this point in the history
Make sure to escape the key contents in the delete confirmation dialog.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 0186d7e)
  • Loading branch information
jow- committed Jan 13, 2023
1 parent 396f404 commit 588381e
Showing 1 changed file with 1 addition and 1 deletion.
Original file line number Diff line number Diff line change
Expand Up @@ -198,7 +198,7 @@ function removeKey(ev) {

L.showModal(_('Delete key'), [
E('div', _('Do you really want to delete the following SSH key?')),
E('pre', delkey),
E('pre', [ delkey ]),
E('div', { class: 'right' }, [
E('div', { class: 'btn', click: L.hideModal }, _('Cancel')),
' ',
Expand Down

0 comments on commit 588381e

Please sign in to comment.