mirror of
https://github.com/dani-garcia/vaultwarden.wiki.git
synced 2026-11-01 16:06:48 +02:00
Update admin interface (#4737)
- Updated datatables - Set Cookie Secure flag if the connection is https - Prevent possible XSS via Organization Name Converted all `innerHTML` and `innerText` to the Safe Sink version `textContent` - Removed `jsesc` function as handlebars escapes all these chars already and more by default
This commit is contained in:
1 parent
035f694d2f
commit
54bfcb8bc3
11 files changed
+95
-67
No files matched your search
Vendored
+1
-1
@@ -122,7 +122,7 @@ function submitTestEmailOnEnter() {
|
||||
function colorRiskSettings() {
|
||||
const risk_items = document.getElementsByClassName("col-form-label");
|
||||
Array.from(risk_items).forEach((el) => {
|
||||
if (el.innerText.toLowerCase().includes("risks") ) {
|
||||
if (el.textContent.toLowerCase().includes("risks") ) {
|
||||
el.parentElement.className += " alert-danger";
|
||||
}
|
||||
});
|
||||
|
||||
Reference in new issue
Block a user