projects / project / luci.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 68453ff) | patch
luci-mod-system: sshkeys.js: prevent XSS through pubkey comments
authorJo-Philipp Wich <jo@mein.io>
Wed, 21 Sep 2022 12:47:41 +0000 (14:47 +0200)
committerJo-Philipp Wich <jo@mein.io>
Wed, 21 Sep 2022 12:47:41 +0000 (14:47 +0200)
commit944b55738e7f9685865d5298248b7fbd7380749e
treebea3f287aec71252770db597b035e399019e05betree | snapshot
parent68453ff14ad1fa90b71c83aa0a51cee7cd412acdcommit | diff
luci-mod-system: sshkeys.js: prevent XSS through pubkey comments

Ensure to not display public key comments verbatim in order to prevent
injection of markup.

Reported-by: Eric McDonald <ericmcdonald@protonmail.com>
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
modules/luci-mod-system/htdocs/luci-static/resources/view/system/sshkeys.js diff | blob | history
Lua Configuration Interface (mirror)