kyy/swagger-ui
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix for xss issue

Browse Source
This commit is contained in:
Anna Bodnia
2016-08-17 20:55:23 +03:00
parent 6c4ccf7a6d
commit 11f1263a62
21 changed files with 529 additions and 531 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
src/main/template/param.handlebars
View File

@@ -1,18 +1,18 @@
<td class='code'><label for='{{valueId}}'>{{name}}</label></td>
<td class='code'><label for='{{{escape valueId}}}'>{{{escape name}}}</label></td>
<td>
{{#if isBody}}
{{#if isFile}}
<input type="file" name='{{name}}' id='{{valueId}}'/>
<input type="file" name='{{{escape name}}}' id='{{{escape valueId}}}'/>
<div class="parameter-content-type" />
{{else}}
{{#if default}}
<div class="editor_holder"></div>
<textarea class='body-textarea' name='{{name}}' id='{{valueId}}'>{{default}}</textarea>
<textarea class='body-textarea' name='{{{escape name}}}' id='{{{escape valueId}}}'>{{{escape default}}}</textarea>
<br />
<div class="parameter-content-type" />
{{else}}
<textarea class='body-textarea' name='{{name}}' id='{{valueId}}'></textarea>
<textarea class='body-textarea' name='{{{escape name}}}' id='{{{escape valueId}}}'></textarea>
<div class="editor_holder"></div>
<br />
<div class="parameter-content-type" />
@@ -20,7 +20,7 @@
{{/if}}
{{else}}
{{#if isFile}}
<input type="file" name='{{name}}' id='{{valueId}}'/>
<input type="file" name='{{{escape name}}}' id='{{{escape valueId}}}'/>
<div class="parameter-content-type" />
{{else}}
{{#renderTextParam this}}
@@ -29,8 +29,8 @@
{{/if}}
</td>
<td class="markdown">{{{description}}}</td>
<td>{{{paramType}}}</td>
<td class="markdown">{{{sanitize description}}}</td>
<td>{{{escape paramType}}}</td>
<td>
<span class="model-signature"></span>
</td>