admin/Facilitor
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

FCLT#56754 XSS voorkomen

Browse Source 
svn path=/Website/trunk/; revision=41452
This commit is contained in:
Koen Reefman
2019-03-11 12:23:55 +00:00
parent b85db2f3f8
commit 0da5ed3f1c
1 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
APPL/MLD/mld_show_note2.asp
View File

@@ -49,7 +49,7 @@ var eigenMelding = user_key == mld_info.melder_key || user.isCollega(mld_info.me
var afgehandeld = (mld_info.mld_status == 1 || mld_info.mld_status == 5 || mld_info.mld_status == 6);
var canDeleteNoteAttachment = (mld_info.mld_status == 6 ? 0 : 1);
var timestamp_notes = new Date();
var meldernaam = new Perslid(mld_info.melder_key).naam();
var safe_meldernaam = safe.html(new Perslid(mld_info.melder_key).naam());
var kenmerk_key_arr = [];
var srtkenm_oms_arr = [];
@@ -815,17 +815,17 @@ if (mld_key > 0)
var actie_bij_melder = (mld_info.actiecode & 2) == 2; // stond actie al bij melder?
if (actie_bij_melder)
{
var lbl = L("lcl_mld_latenbij_FE").format(meldernaam);
var lbl = L("lcl_mld_latenbij_FE").format(safe_meldernaam);
}
else
{
actie_bij_melder = note_zichtbaarFE && S("mld_note_default_notifyFE")==1;
var lbl = L("lcl_mld_toekennen_FE").format(meldernaam);
var lbl = L("lcl_mld_toekennen_FE").format(safe_meldernaam);
}
// We doen aan pingpongen
Response.Write("<span id='notioption' style='{0}'>".format(note_zichtbaarFE? "display:inline" :"display:none"));
CHECKBOX("fldcheck", "notifyFE", actie_bij_melder, { html: "onchange='notiToggler(this)'" });
Response.Write("<label for='notifyFE'>{0}</label></span>".format(L("lcl_mld_notify_FE").format(meldernaam)));
Response.Write("<label for='notifyFE'>{0}</label></span>".format(L("lcl_mld_notify_FE").format(safe_meldernaam)));
Response.Write("<span id='actionoption' style='{0}'>".format(note_zichtbaarFE? "display:inline":"display:none"));
CHECKBOX("fldcheck", "action2FE", actie_bij_melder, { html: "onchange='actionToggler(this)'" });