Jo-Philipp Wich db88156dff luci-base: form.js: do not execute embedded script code in stripTags() ...

Instead of relying on .innerHTML which executes embedded script code to
parse a given HTML fragment, use dom.parse() which utilizies DOMParser()
internally in order to extract textContent in a safe manner.

Fixes: FS#4199
Ref: https://bugs.openwrt.org/index.php?do=details&task_id=4199
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 993151504e8e810c083d3257555bdcdc2f00673a)

2021-12-23 17:10:18 +01:00

..

luci-base

luci-base: form.js: do not execute embedded script code in stripTags()

2021-12-23 17:10:18 +01:00

luci-compat

luci-compat: update markup for CBI TableSections

2021-04-09 14:31:06 +02:00

luci-mod-admin-full

luci-base: use cgi-io and rpcd-mod-file to handle file upload and browsing

2019-09-10 15:28:16 +02:00

luci-mod-admin-mini

treewide: removed trailing whitespaces and extra newlines in 'modules'

2021-01-20 17:48:16 +02:00

luci-mod-battstatus

luci-mod-battstatus: chmod battstatus.js to 644

2021-08-17 12:11:14 +02:00

luci-mod-dashboard

treewide: minor fixes to typos, whitespace, and indentation

2021-01-20 12:36:13 +02:00

luci-mod-failsafe

luci-mod-failsafe: use same string as luci-mod-admin-full

2016-12-10 19:11:50 +02:00

luci-mod-network

luci-mod-network: fix loading ra_mtu and ra_hoplimit options

2021-12-01 23:20:27 +01:00

luci-mod-rpc

treewide: removed trailing whitespaces and extra newlines in 'modules'

2021-01-20 17:48:16 +02:00

luci-mod-status

status: make buffered conditional

2021-10-22 20:32:59 +02:00

luci-mod-system

luci-mod-system: add missing require to none led trigger class

2021-11-01 21:42:47 +01:00