فهرست منبع

Merge pull request #3738 from overleaf/jpa-fix-xss-registration

[misc] fix angular xss on user registration page

GitOrigin-RevId: 5dcc2aa0212371f154fba563d21018379292b9fe
Thomas 5 سال پیش
والد
کامیت
99834f0d7e
1فایلهای تغییر یافته به همراه3 افزوده شده و 3 حذف شده
  1. 3 3
      services/web/app/views/user/register.pug

+ 3 - 3
services/web/app/views/user/register.pug

@@ -14,7 +14,7 @@ block content
 							| #{translate("if_you_are_registered")},
 							a(href="/login")  #{translate("login_here")}
 					else if newTemplateData.templateName !== undefined
-						h1 #{translate("register_to_edit_template", {templateName:newTemplateData.templateName})}
+						h1(ng-non-bindable) #{translate("register_to_edit_template", {templateName:newTemplateData.templateName})}
 
 						div #{translate("already_have_sl_account")}
 							a(href="/login")  #{translate("login_here")}
@@ -25,6 +25,6 @@ block content
 						.page-header
 							h1 #{translate("register")}
 						p
-							| Please contact 
-							strong(ng-non-bindable) #{settings.adminEmail} 
+							| Please contact
+							strong(ng-non-bindable) #{settings.adminEmail}
 							| to create an account.