Security fix: Use JSON serialization for template variable in JavaScript

- Fixed XSS vulnerability in file detail template
- Use tojson filter to safely encode file.id into JavaScript
- CodeQL scan confirms no security issues

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
This commit is contained in:
copilot-swe-agent[bot]
2026-02-07 20:58:23 +00:00
parent cdd9d19e94
commit b4e066bf2d
+1 -1
View File
@@ -210,7 +210,7 @@
<script>
// JavaScript for handling retry functionality
async function reprocessFile() {
const fileId = {{ file.id }};
const fileId = {{ file.id | tojson }};
const button = document.getElementById('reprocess-btn');
const statusDiv = document.getElementById('reprocess-status');