admin/Facilitor
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

FCLT#56880 XSS voorkomen

Browse Source 
svn path=/Website/branches/v2019.1/; revision=41708
This commit is contained in:
Koen Reefman
2019-03-21 08:13:00 +00:00
parent 71713f6408
commit f4b360c0f8
1 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
APPL/PDA/notitie.asp
View File

@@ -48,7 +48,7 @@ var sql = "";
var action = "../mld/mld_edit_note_save.asp?urole="+urole+"&mld_key=" +pkey;
var mld_info = mld.mld_melding_info(pkey);
var meldernaam = new Perslid(mld_info.melder_key).naam();
var safe_meldernaam = safe.html(new Perslid(mld_info.melder_key).naam());
lcl.set_dialect(mld_info.srtdisc, "MLD_SRTDISCIPLINE_KEY");
pnote.subject = mld_info.prefix + pkey;
pnote.fenotes = mld_info.fenotes;
@@ -388,17 +388,17 @@ if (pnode == "melding")
var actie_bij_melder = (mld_info.actiecode & 2) == 2; // stond actie al bij melder?
if (actie_bij_melder)
{
var lbl = L("lcl_mld_latenbij_FE").format(meldernaam);
var lbl = L("lcl_mld_latenbij_FE").format(safe_meldernaam);
}
else
{
actie_bij_melder = pnote.zichtbaar && S("mld_note_default_notifyFE")==1;
var lbl = L("lcl_mld_toekennen_FE").format(meldernaam);
var lbl = L("lcl_mld_toekennen_FE").format(safe_meldernaam);
}
// We doen aan pingpongen
var actie_bij_melder = (pnote.zichtbaar && S("mld_note_default_notifyFE")==1 ? 1 : 0);
Response.Write("<span id='notioption'"+(pnote.zichtbaar? "style='display:inline'" :" style='display:none'")+">");
CHB_FIELD("notifyFE", "<nobr>" + L("lcl_mld_notify_FE").format(meldernaam) + "</nobr>", actie_bij_melder, { onclick: "notiToggler(this)"});
CHB_FIELD("notifyFE", "<nobr>" + L("lcl_mld_notify_FE").format(safe_meldernaam) + "</nobr>", actie_bij_melder, { onclick: "notiToggler(this)"});
Response.Write("</span>");
Response.Write("<span id='actionoption' style='{0}'>".format(pnote.zichtbaar? "display:inline":"display:none"));