github
/
AdminLTE
mirror of https://github.com/ColorlibHQ/AdminLTE
1
0
Fork 0
Code Issues Releases Wiki Activity

Fix XSS in calendar.html (#2868) 

* Fix XSS in calendar.html

* Remove console.log
pull/2965/head
XhmikosR 2020-07-15 10:54:06 +03:00 committed by GitHub
parent d114eabfe6
commit 903143a1e1
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 8 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
pages/calendar.html
View File

@ -889,7 +889,6 @@
new Draggable(containerEl, { new Draggable(containerEl, {
itemSelector: '.external-event', itemSelector: '.external-event',
eventData: function(eventEl) { eventData: function(eventEl) {
console.log(eventEl);
return { return {
title: eventEl.innerText, title: eventEl.innerText,
backgroundColor: window.getComputedStyle( eventEl ,null).getPropertyValue('background-color'), backgroundColor: window.getComputedStyle( eventEl ,null).getPropertyValue('background-color'),
@ -997,7 +996,7 @@
'border-color' : currColor, 'border-color' : currColor,
'color' : '#fff' 'color' : '#fff'
}).addClass('external-event') }).addClass('external-event')
event.html(val) event.text(val)
$('#external-events').prepend(event) $('#external-events').prepend(event)
// Add draggable funtionality // Add draggable funtionality