gitea-admin/gh-christianlouis-docuelevate
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Security fix: Use JSON serialization for template variable in JavaScript

Browse Source 
- Fixed XSS vulnerability in file detail template
- Use tojson filter to safely encode file.id into JavaScript
- CodeQL scan confirms no security issues

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
This commit is contained in:
copilot-swe-agent[bot]
2026-02-07 20:58:23 +00:00
parent cdd9d19e94
commit b4e066bf2d
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
frontend/templates/file_detail.html
+1 -1
View File
@@ -210,7 +210,7 @@
<script> <script>
// JavaScript for handling retry functionality // JavaScript for handling retry functionality
async function reprocessFile() { async function reprocessFile() {
const fileId = {{ file.id }}; const fileId = {{ file.id | tojson }};
const button = document.getElementById('reprocess-btn'); const button = document.getElementById('reprocess-btn');
const statusDiv = document.getElementById('reprocess-status'); const statusDiv = document.getElementById('reprocess-status');