Mirrors/EOS
1
0
Fork 0
mirror of https://github.com/Akkudoktor-EOS/EOS.git synced 2025-04-19 08:55:15 +00:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

Fix Cross Site Scripting Issue (#497)

Browse Source
This commit is contained in:
Yunus AYDIN 2025-03-28 00:22:18 +03:00 committed by Dominique Lasserre
parent 8bdad48823
commit 87ebbf0f08
1 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
src/akkudoktoreos/server/rest/error.py
View File

@ -1,3 +1,5 @@
import html
ERROR_PAGE_TEMPLATE = """ ERROR_PAGE_TEMPLATE = """
<!DOCTYPE html> <!DOCTYPE html>
<html lang="en"> <html lang="en">
@ -86,6 +88,6 @@ def create_error_page(
return ( return (
ERROR_PAGE_TEMPLATE.replace("STATUS_CODE", status_code) ERROR_PAGE_TEMPLATE.replace("STATUS_CODE", status_code)
.replace("ERROR_TITLE", error_title) .replace("ERROR_TITLE", error_title)
.replace("ERROR_MESSAGE", error_message) .replace("ERROR_MESSAGE", html.escape(error_message))
.replace("ERROR_DETAILS", error_details) .replace("ERROR_DETAILS", html.escape(error_details))
) )