mirror of
https://git.proxmox.com/git/pve-manager
synced 2025-10-04 05:57:13 +00:00
![]() `response.htmlStatus` is used to display error messages to the user. Hence, make sure that HTML in the error message is properly encoded. `API2Request` has two codepaths setting `response.htmlStatus`: - in the `success` callback, htmlStatus is assigned the result of `extractRequestError`, which already encodes server-provided strings. - in the `failure` callback, where this patch adds a missing htmlEncode. Signed-off-by: Friedrich Weber <f.weber@proxmox.com> Reviewed-by: Dominik Csapak <d.csapak@proxmox.com> |
||
---|---|---|
aplinfo | ||
bin | ||
configs | ||
debian | ||
network-hooks | ||
PVE | ||
services | ||
templates | ||
test | ||
www | ||
.gitignore | ||
defines.mk | ||
Makefile | ||
spice-example-sh | ||
vzdump-hook-script.pl |