AS1024
/
Kanboard-Prod
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix potential XSS on the Settings / API page 

The CSP policy already prevent the execution of inline Javascript.
This commit is contained in:
Frédéric Guillot 2023-01-06 21:02:44 +01:00 committed by Frédéric Guillot
parent 8902c1448d
commit 3824e6e9aa
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
app/Template/config/api.php
View File

@ -9,7 +9,7 @@
</li> </li>
<li> <li>
<?= t('API endpoint:') ?> <?= t('API endpoint:') ?>
<strong><?= $this->url->base().'jsonrpc.php' ?></strong> <strong><?= $this->text->e($this->url->base()).'jsonrpc.php' ?></strong>
</li> </li>
</ul> </ul>
</div> </div>