Quellcode durchsuchen

Merge pull request #3721 from overleaf/as-fix-register-xss

Prevent XSS on registration page

GitOrigin-RevId: 93e5a345752c3c5c42f488d9c75c70a9036bf53c
Alf Eaton vor 5 Jahren
Ursprung
Commit
248e860757
1 geänderte Dateien mit 1 neuen und 1 gelöschten Zeilen
  1. 1 1
      services/web/app/views/user/register.pug

+ 1 - 1
services/web/app/views/user/register.pug

@@ -6,7 +6,7 @@ block content
 			.row
 			.row
 				.registration_message
 				.registration_message
 					if sharedProjectData.user_first_name !== undefined
 					if sharedProjectData.user_first_name !== undefined
-						h1  #{translate("user_wants_you_to_see_project", {username:sharedProjectData.user_first_name, projectname:""})}
+						h1(ng-non-bindable) #{translate("user_wants_you_to_see_project", {username:sharedProjectData.user_first_name, projectname:""})}
 							em(ng-non-bindable) #{sharedProjectData.project_name}
 							em(ng-non-bindable) #{sharedProjectData.project_name}
 						div
 						div
 							| #{translate("join_sl_to_view_project")}.
 							| #{translate("join_sl_to_view_project")}.