pengjunjie/web-apps
1
0
Fork 1
mirror of https://github.com/ONLYOFFICE/web-apps.git synced 2026-07-23 16:51:00 +08:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request '[wopi] Replace vulnerable "<%-" with "<%="; Fix bug 80768' (#1071) from fix/bug-80768 into release/v9.4.0

Browse Source 
Reviewed-on: https://git.onlyoffice.com/ONLYOFFICE/web-apps/pulls/1071
This commit is contained in:
Oleg Korshul
2026-03-24 16:55:54 +00:00
parent 6dfeb73ee0 4927e10d44
commit cce1d09bc5
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
apps/api/wopi/convert-and-edit-wopi.ejs
View File

@ -195,7 +195,7 @@ button:disabled, button[disabled]{
</div>
</div>
</div>
<input id="statusHandler" type="hidden" value="<%= statusHandler || '' %>">
<script type="text/javascript" language="javascript">
function redirect(url) {
@ -253,7 +253,7 @@ button:disabled, button[disabled]{
var convertFile = function () {
let statusHandler = <%- JSON.stringify(statusHandler) %>;
let statusHandler = document.getElementById('statusHandler').value || null;
if(!statusHandler) {
error();