1
1
mirror of https://github.com/go-gitea/gitea synced 2025-01-11 02:04:27 +00:00
Gusted d8a8961b99
Sanitize user-input on file name (#17666)
* Sanitize user-input on file name

- Sanitize user-input before it get passed into the DOM.
- Prevent things like "<iframe onload=alert(1)></iframe>" from being
executed. This isn't a XSS attack as the server seems to be santizing
the path as well.

Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>
2021-11-17 18:08:25 +00:00
..
2021-11-11 09:52:16 +08:00
2021-11-11 09:52:16 +08:00