N°4495 Security hardening

This commit is contained in:
Stephen Abello
2021-12-02 09:39:10 +01:00
parent f52b3bff0d
commit d289457c0c

View File

@@ -916,7 +916,7 @@ $(function()
// - Make a jQuery element for a list item // - Make a jQuery element for a list item
_makeListItemElement: function(sLabel, sValue, bInitChecked, bInitHidden) _makeListItemElement: function(sLabel, sValue, bInitChecked, bInitHidden)
{ {
var sEscapedLabel = sLabel; // Note: We don't escape this anymore as there is an issue with AttributeExternalKey being already escaped. This will be put back in iTop 2.7 with the AttributeDefinition::GetAllowedValues() refactoring. $('<div />').text(sLabel).html(); var sEscapedLabel = $('<div />').text(sLabel).html();
var oItemElem = $('<div></div>') var oItemElem = $('<div></div>')
.addClass('sfc_opc_mc_item') .addClass('sfc_opc_mc_item')
.attr('data-value-code', sValue) .attr('data-value-code', sValue)