extern/egroupware_official
1
0
Fork 0
mirror of https://github.com/EGroupware/egroupware.git synced 2024-12-22 14:41:29 +01:00
Code Issues Packages Projects Releases Wiki Activity

Override the globalEval to mitigate potential execution of script tag

Browse Source
This commit is contained in:
Hadi Nategh 2017-10-27 17:42:04 +02:00
parent 12dbfca137
commit f42801236a
1 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
api/js/jsapi/egw.js
View File

@ -157,6 +157,13 @@
var include = JSON.parse(egw_script.getAttribute('data-include'));
window.egw_LAB.script(include).wait(function()
{
// We need to override the globalEval to mitigate potential execution of
// script tag. This issue is relevant to jQuery 1.12.4, we need to check
// if we still need this after upgrading jQuery.
jQuery.extend({
globalEval:function(data){}
});
// call egw.link_handler, if attr specified
var egw_redirect = egw_script.getAttribute('data-egw-redirect');
if (egw_redirect)