Commit 8421f6a1 authored by antoor's avatar antoor

修复文件管理中文件名过滤不当引起的XSS安全问题

parent 20d3b925
......@@ -413,10 +413,10 @@ class Files {
fsize: parseInt(file['size']),
data: [
self.fileIcon(file['name']),
file['name'].replace(/\/$/, ''),
file['time'],
self.fileSize(parseInt(file['size'])),
file['attr']
antSword.noxss(file['name'].replace(/\/$/, '')),
antSword.noxss(file['time']),
antSword.noxss(self.fileSize(parseInt(file['size']))),
antSword.noxss(file['attr'])
]
});
_id ++;
......
This source diff could not be displayed because it is too large. You can view the blob instead.
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment