DRCIT/snipe-it
1
0
Fork 0
mirror of https://github.com/snipe/snipe-it.git synced 2024-12-26 06:04:08 -08:00
Code Issues Actions 11 Packages Projects Releases Wiki Activity

Merge pull request #10201 from snipe/fixes/xss_on_export

Browse source 
Fixes possible XSS on all-file-types export
This commit is contained in:
snipe 2021-10-15 09:54:52 -07:00 committed by GitHub
parent 5d94b99035 bda23bb1e6
commit f87ffb84d5
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 4 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
resources/views/partials/bootstrap-table.blade.php
View file

@ -75,6 +75,10 @@
export: 'fa-download', export: 'fa-download',
clearSearch: 'fa-times' clearSearch: 'fa-times'
}, },
exportOptions: {
htmlContent: true,
},
exportTypes: ['csv', 'excel', 'doc', 'txt','json', 'xml', 'pdf'], exportTypes: ['csv', 'excel', 'doc', 'txt','json', 'xml', 'pdf'],
onLoadSuccess: function () { onLoadSuccess: function () {
$('[data-toggle="tooltip"]').tooltip(); // Needed to attach tooltips after ajax call $('[data-toggle="tooltip"]').tooltip(); // Needed to attach tooltips after ajax call