Browse Source

Fixed XSS attack with err param.

KrisVos130 8 years ago
parent
commit
77509d2ac7
1 changed files with 5 additions and 1 deletions
  1. 5 1
      frontend/App.vue

+ 5 - 1
frontend/App.vue

@@ -77,7 +77,11 @@
 			lofig.get('serverDomain', res => {
 			lofig.get('serverDomain', res => {
 				_this.serverDomain = res;
 				_this.serverDomain = res;
 			});
 			});
-			if (_this.$route.query.err) Toast.methods.addToast(_this.$route.query.err, 20000);
+			if (_this.$route.query.err) {
+				let err = _this.$route.query.err;
+				err = err.replace(new RegExp('<', 'g'), '&lt;').replace(new RegExp('>', 'g'), '&gt;');
+				Toast.methods.addToast(err, 20000);
+			}
 		},
 		},
 		events: {
 		events: {
 			'register': function () {
 			'register': function () {