Просмотр исходного кода

Merge pull request #3721 from overleaf/as-fix-register-xss

Prevent XSS on registration page

GitOrigin-RevId: 93e5a345752c3c5c42f488d9c75c70a9036bf53c
Alf Eaton 5 лет назад
Родитель
Сommit
248e860757
1 измененных файлов с 1 добавлено и 1 удалено
  1. 1 1
      services/web/app/views/user/register.pug

+ 1 - 1
services/web/app/views/user/register.pug

@@ -6,7 +6,7 @@ block content
 			.row
 				.registration_message
 					if sharedProjectData.user_first_name !== undefined
-						h1  #{translate("user_wants_you_to_see_project", {username:sharedProjectData.user_first_name, projectname:""})}
+						h1(ng-non-bindable) #{translate("user_wants_you_to_see_project", {username:sharedProjectData.user_first_name, projectname:""})}
 							em(ng-non-bindable) #{sharedProjectData.project_name}
 						div
 							| #{translate("join_sl_to_view_project")}.