pengjunjie/web-apps
1
0
Fork 1
mirror of https://github.com/ONLYOFFICE/web-apps.git synced 2026-07-23 20:20:30 +08:00
Code Issues Packages Projects Releases Wiki Activity

[wopi] Replace vulnerable "<%-" with "<%="; Fix bug 80768

Browse Source
This commit is contained in:
Sergey Konovalov
2026-03-24 19:10:38 +03:00
parent 6dfeb73ee0
commit 4927e10d44
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
apps/api/wopi/convert-and-edit-wopi.ejs
View File

@ -195,7 +195,7 @@ button:disabled, button[disabled]{
</div>
</div>
</div>
<input id="statusHandler" type="hidden" value="<%= statusHandler || '' %>">
<script type="text/javascript" language="javascript">
function redirect(url) {
@ -253,7 +253,7 @@ button:disabled, button[disabled]{
var convertFile = function () {
let statusHandler = <%- JSON.stringify(statusHandler) %>;
let statusHandler = document.getElementById('statusHandler').value || null;
if(!statusHandler) {
error();