mirror of
https://github.com/NodeBB/NodeBB.git
synced 2025-10-30 02:25:55 +01:00
Update index.js, fix outgoing XSS
Fix XSS on /outgoing route
This commit is contained in:
@@ -181,7 +181,7 @@ Controllers.robots = function (req, res) {
|
||||
Controllers.outgoing = function(req, res, next) {
|
||||
var url = req.query.url,
|
||||
data = {
|
||||
url: url,
|
||||
url: validator.escape(url),
|
||||
title: meta.config.title,
|
||||
breadcrumbs: helpers.buildBreadcrumbs([{text: '[[notifications:outgoing_link]]'}])
|
||||
};
|
||||
|
||||
Reference in New Issue
Block a user