Difuse/luci
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

luci-mod-system: ensure that textarea contents are properly escaped

Browse source 
Fixes: #3090
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
This commit is contained in:
Jo-Philipp Wich 2019-09-23 11:44:18 +02:00
parent cf239f9e10
commit f3ff641d8e
2 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
modules/luci-mod-system/htdocs/luci-static/resources/view/system/crontab.js
View file

@ -40,7 +40,7 @@ return L.view.extend({
E('p', {}, E('p', {},
_('This is the system crontab in which scheduled tasks can be defined.') + _('This is the system crontab in which scheduled tasks can be defined.') +
_('<br/>Note: you need to manually restart the cron service if the crontab file was empty before editing.')), _('<br/>Note: you need to manually restart the cron service if the crontab file was empty before editing.')),
E('p', {}, E('textarea', { 'style': 'width:100%', 'rows': 10 }, crontab != null ? crontab : '')) E('p', {}, E('textarea', { 'style': 'width:100%', 'rows': 10 }, [ crontab != null ? crontab : '' ]))
]); ]);
}, },

2
modules/luci-mod-system/htdocs/luci-static/resources/view/system/startup.js
View file

@ -125,7 +125,7 @@ return L.view.extend({
]), ]),
E('div', { 'data-tab': 'rc', 'data-tab-title': _('Local Startup') }, [ E('div', { 'data-tab': 'rc', 'data-tab-title': _('Local Startup') }, [
E('p', {}, _('This is the content of /etc/rc.local. Insert your own commands here (in front of \'exit 0\') to execute them at the end of the boot process.')), E('p', {}, _('This is the content of /etc/rc.local. Insert your own commands here (in front of \'exit 0\') to execute them at the end of the boot process.')),
E('p', {}, E('textarea', { 'style': 'width:100%', 'rows': 20 }, rcLocal != null ? rcLocal : '')), E('p', {}, E('textarea', { 'style': 'width:100%', 'rows': 20 }, [ (rcLocal != null ? rcLocal : '') ]),
E('div', { 'class': 'cbi-page-actions' }, [ E('div', { 'class': 'cbi-page-actions' }, [
E('button', { E('button', {
'class': 'btn cbi-button-save', 'class': 'btn cbi-button-save',