extern/egroupware
1
0
Fork 1
mirror of https://github.com/EGroupware/egroupware.git synced 2025-06-24 11:51:43 +02:00
Code Issues Packages Projects Releases Wiki Activity

Override the globalEval to mitigate potential execution of script tag

Browse Source
This commit is contained in:
Hadi Nategh 2017-10-27 17:42:04 +02:00
parent 12dbfca137
commit f42801236a
1 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
api/js/jsapi/egw.js
View File

@ -157,6 +157,13 @@
var include = JSON.parse(egw_script.getAttribute('data-include')); var include = JSON.parse(egw_script.getAttribute('data-include'));
window.egw_LAB.script(include).wait(function() window.egw_LAB.script(include).wait(function()
{ {
// We need to override the globalEval to mitigate potential execution of
// script tag. This issue is relevant to jQuery 1.12.4, we need to check
// if we still need this after upgrading jQuery.
jQuery.extend({
globalEval:function(data){}
});
// call egw.link_handler, if attr specified // call egw.link_handler, if attr specified
var egw_redirect = egw_script.getAttribute('data-egw-redirect'); var egw_redirect = egw_script.getAttribute('data-egw-redirect');
if (egw_redirect) if (egw_redirect)