SECURITY: fix possible XSS with badges (#6912)

2019-01-21 13:08:26 +01:00 · 2019-01-21 13:08:26 +01:00 · 9f7e64eead
commit 9f7e64eead
parent 7f50fc4f70
1 changed files with 1 additions and 1 deletions
--- a/app/assets/javascripts/admin/templates/user-badges.hbs
+++ b/app/assets/javascripts/admin/templates/user-badges.hbs
@ -16,7 +16,7 @@
    <form class="form-horizontal">
      <div>
      <label>{{i18n 'admin.badges.badge'}}</label>
-      {{combo-box filterable=true value=selectedBadgeId content=grantableBadges}}
+      {{combo-box forceEscape=true filterable=true value=selectedBadgeId content=grantableBadges}}
      </div>
      <div>
      <label>{{i18n 'admin.badges.reason'}}</label>