projects / project / luci.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 712bc8e) | patch
luci-mod-system: sshkeys.js: prevent XSS through pubkey comments openwrt-19.07
authorJo-Philipp Wich <jo@mein.io>
Wed, 21 Sep 2022 12:47:41 +0000 (14:47 +0200)
committerJo-Philipp Wich <jo@mein.io>
Wed, 21 Sep 2022 12:50:02 +0000 (14:50 +0200)
commitf25285a6c26e8776f153994704710cb8e51fad91
treef6fef2505b8d0ba6dc2b7ff8227508b62bcf8587tree | snapshot
parent712bc8e52d73720dc42577c08eb80ce7b1548b1ecommit | diff
luci-mod-system: sshkeys.js: prevent XSS through pubkey comments

Ensure to not display public key comments verbatim in order to prevent
injection of markup.

Reported-by: Eric McDonald <ericmcdonald@protonmail.com>
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 944b55738e7f9685865d5298248b7fbd7380749e)
modules/luci-mod-system/htdocs/luci-static/resources/view/system/sshkeys.js diff | blob | history
Lua Configuration Interface (mirror)