Avoid potential clipboard based cross-site scripting
This commit is contained in:
committed by
Frédéric Guillot
parent
fe5fd9f774
commit
26b6eebb78
@@ -36,7 +36,7 @@ KB.component('screenshot', function (containerElement) {
|
||||
|
||||
if (! window.Clipboard) {
|
||||
// Insert the content editable at the top to avoid scrolling down in the board view
|
||||
pasteCatcher = document.createElement('div');
|
||||
pasteCatcher = document.createElement('template');
|
||||
pasteCatcher.id = 'screenshot-pastezone';
|
||||
pasteCatcher.contentEditable = true;
|
||||
pasteCatcher.style.opacity = 0;
|
||||
|
||||
Reference in New Issue
Block a user