Skip to content

S
spring-cloud-netflix
Commit 0df6f0c0 by Spencer Gibb
Options

fix(title-xss): escaping text acquired from parameters to avoid any xss attacks

https://github.com/Netflix/Hystrix/pull/921
parent a7abfd42
Showing with 2 additions and 2 deletions
spring-cloud-netflix-hystrix-dashboard/src/main/resources/templates/hystrix/monitor.ftl
...@@ -101,9 +101,9 @@ ...@@ -101,9 +101,9 @@
var poolStream = "${contextPath}/proxy.stream?origin=" + stream; var poolStream = "${contextPath}/proxy.stream?origin=" + stream;
if(getUrlVars()["title"] != undefined) { if(getUrlVars()["title"] != undefined) {
$('#title_name').html("Hystrix Stream: " + decodeURIComponent(getUrlVars()["title"])) $('#title_name').text("Hystrix Stream: " + decodeURIComponent(getUrlVars()["title"]))
} else { } else {
$('#title_name').html("Hystrix Stream: " + decodeURIComponent(stream)) $('#title_name').text("Hystrix Stream: " + decodeURIComponent(stream))
} }
} }
console.log("Command Stream: " + commandStream) console.log("Command Stream: " + commandStream)
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment