Skip to content

Possible security hole in confirmation dialog due to use of SpaceBars.SafeString() #180

@derwok

Description

@derwok

Example: create a meeting series with this name: <div onclick="alert(1);">test</div>

Then delete the meeting series. In the confirmation dialog this code will make the name clickable:

 'getContent': function() {
        // SafeString allows us to pass html content
        return Spacebars.SafeString(Session.get("confirmationDialogContent"));
    },

Metadata

Metadata

Assignees

Type

No type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions