fixed tag xss issue

2016-08-23 18:26:50 +03:00
parent 45ec53e81a
commit a1aea70f2c
12 changed files with 70 additions and 19 deletions
--- a/src/main/javascript/view/MainView.js
+++ b/src/main/javascript/view/MainView.js
@@ -96,7 +96,7 @@ SwaggerUi.Views.MainView = Backbone.View.extend({
        id = id + '_' + counter;
        counter += 1;
      }
-      resource.id = id;
+      resource.id = SwaggerUi.utils.sanitize(id);
      resources[id] = resource;
      this.addResource(resource, this.model.auths);
    }