luci-mod-system: fix potential stored XSS
Make sure to escape the key contents in the delete confirmation dialog. Signed-off-by: Jo-Philipp Wich <jo@mein.io> (cherry picked from commit 0186d7eae0e123a409e9919a83fdfecc7945c984)
This commit is contained in:
parent
d548d858c8
commit
aa7938d4cb
@ -198,7 +198,7 @@ function removeKey(ev) {
|
||||
|
||||
L.showModal(_('Delete key'), [
|
||||
E('div', _('Do you really want to delete the following SSH key?')),
|
||||
E('pre', delkey),
|
||||
E('pre', [ delkey ]),
|
||||
E('div', { class: 'right' }, [
|
||||
E('div', { class: 'btn', click: L.hideModal }, _('Cancel')),
|
||||
' ',
|
||||
|
||||
Loading…
x
Reference in New Issue
Block a user