mirror of
https://github.com/Azure/cosmos-explorer.git
synced 2026-10-10 03:56:39 +01:00
Fix stored XSS via Cassandra column names in DataTable headers (#2499)
Co-authored-by: Asier Isayas <[email protected]>
This commit is contained in:
co-authored by
Asier Isayas
parent
5ee2ca37d5
commit
41ae13ea3a
@@ -93,7 +93,7 @@ function createDataTable(
|
||||
|
||||
for (var i = 0; i < tableEntityListViewModel.headers.length; i++) {
|
||||
jsonColTable.push({
|
||||
sTitle: tableEntityListViewModel.headers[i],
|
||||
sTitle: Utilities.htmlEncode(tableEntityListViewModel.headers[i]),
|
||||
data: tableEntityListViewModel.headers[i],
|
||||
aTargets: [i],
|
||||
mRender: bindColumn,
|
||||
|
||||
Reference in New Issue
Block a user