Skip to content

Commit 182c047

Browse files
User Input Form Fix (#369)
This PR restricts the form field type to text so that it cannot be interpreted as HTML
1 parent b629ddc commit 182c047

1 file changed

Lines changed: 3 additions & 2 deletions

File tree

internal/resources/webform/webform.js

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -2749,18 +2749,19 @@ window.initGRPCForm = function(services, svcDescs, mtdDescs, invokeURI, metadata
27492749
accordion.append(`<div class="history-item-panel">
27502750
<div class="history-detail-request">
27512751
<div class="history-detail-heading">Request</div>
2752-
<span><pre class="request-json">${dataString.slice(0, 250)}${dataString.length > 250 ? '...' : ''}</pre></span>
2752+
<span><pre class="request-json"></pre></span>
27532753
</div>
27542754
${item.request.metadata.length === 0 ? '' : `
27552755
<div class="history-detail-metadata">
27562756
<div class="history-detail-heading">Metadata</div>
27572757
<table>
27582758
${item.request.metadata.map((item) => `
2759-
<tr><th>${item.name}</th><td>${item.value}</td></tr>
2759+
<tr><th>${item.name.text}</th><td>${item.value.text}</td></tr>
27602760
`).join('\n')}
27612761
</table>
27622762
</div>`}
27632763
</div>`);
2764+
document.querySelector(".request-json").textContent = dataString.slice(0, 250) + (dataString.length > 250 ? "..." : "");
27642765
$(`#delete-${id}`).click((evt) => {
27652766
deleteHistoryItem(i);
27662767
evt.preventDefault();

0 commit comments

Comments
 (0)