Merge pull request #1867 from joevennix/fix-content-type-xss

Fix issue #1866, XSS in content types from schema.
2016-01-13 09:47:12 -08:00
parent f7e50d1d0d 50c713a261
commit 31709fc118
5 changed files with 25 additions and 25 deletions
--- a/src/main/template/content_type.handlebars
+++ b/src/main/template/content_type.handlebars
@@ -2,7 +2,7 @@
 <select name="contentType" id="{{contentTypeId}}">
 {{#if produces}}
  {{#each produces}}
-	<option value="{{this}}">{{{this}}}</option>
+	<option value="{{this}}">{{this}}</option>
 	{{/each}}
 {{else}}
  <option value="application/json">application/json</option>
--- a/src/main/template/parameter_content_type.handlebars
+++ b/src/main/template/parameter_content_type.handlebars
@@ -2,7 +2,7 @@
 <select name="parameterContentType" id="{{parameterContentTypeId}}">
 {{#if consumes}}
  {{#each consumes}}
-  <option value="{{this}}">{{{this}}}</option>
+  <option value="{{this}}">{{this}}</option>
  {{/each}}
 {{else}}
  <option value="application/json">application/json</option>
--- a/src/main/template/response_content_type.handlebars
+++ b/src/main/template/response_content_type.handlebars
@@ -2,7 +2,7 @@
 <select name="responseContentType" id="{{responseContentTypeId}}">
 {{#if produces}}
  {{#each produces}}
-  <option value="{{this}}">{{{this}}}</option>
+  <option value="{{this}}">{{this}}</option>
  {{/each}}
 {{else}}
  <option value="application/json">application/json</option>