projects / project / luci.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 63bfee6) | patch
luci-mod-system: sshkeys.js: prevent XSS through pubkey comments
authorJo-Philipp Wich <jo@mein.io>
Wed, 21 Sep 2022 12:47:41 +0000 (14:47 +0200)
committerJo-Philipp Wich <jo@mein.io>
Wed, 21 Sep 2022 12:49:49 +0000 (14:49 +0200)
commit30ba27798900a351513372d935c7533d9e658c92
tree0d34950defc6b00fa9ded6d1f4db57851cead004tree | snapshot
parent63bfee6c8daaa3a0abb7fd0099baf87255262859commit | diff
luci-mod-system: sshkeys.js: prevent XSS through pubkey comments

Ensure to not display public key comments verbatim in order to prevent
injection of markup.

Reported-by: Eric McDonald <ericmcdonald@protonmail.com>
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 944b55738e7f9685865d5298248b7fbd7380749e)
modules/luci-mod-system/htdocs/luci-static/resources/view/system/sshkeys.js diff | blob | history
Lua Configuration Interface (mirror)