diff options
| author | David Lawrence <dkl@mozilla.com> | 2016-03-08 15:26:33 +0100 |
|---|---|---|
| committer | David Lawrence <dkl@mozilla.com> | 2016-03-08 15:26:44 +0100 |
| commit | 02aa6ce0a7cd9ef14079a5ee22c175ff9d16ed58 (patch) | |
| tree | d262348a346399b483951c41ec77e6e7017ca682 /extensions/TrackingFlags/template/en/default/pages | |
| parent | 0a9f0581b3c8199476a3b8237c192947014f921a (diff) | |
| download | bugzilla-02aa6ce0a7cd9ef14079a5ee22c175ff9d16ed58.tar.gz bugzilla-02aa6ce0a7cd9ef14079a5ee22c175ff9d16ed58.tar.xz | |
Bug 1252445 - Tracking flags configuration is vulnerable to CSRF and causes persistent XSS
Diffstat (limited to 'extensions/TrackingFlags/template/en/default/pages')
| -rw-r--r-- | extensions/TrackingFlags/template/en/default/pages/tracking_flags_admin_edit.html.tmpl | 10 |
1 files changed, 7 insertions, 3 deletions
diff --git a/extensions/TrackingFlags/template/en/default/pages/tracking_flags_admin_edit.html.tmpl b/extensions/TrackingFlags/template/en/default/pages/tracking_flags_admin_edit.html.tmpl index 60406490f..e381c4f1c 100644 --- a/extensions/TrackingFlags/template/en/default/pages/tracking_flags_admin_edit.html.tmpl +++ b/extensions/TrackingFlags/template/en/default/pages/tracking_flags_admin_edit.html.tmpl @@ -30,9 +30,12 @@ var selected_components = [ %] <script> - var groups = [% groups || '[]' FILTER none %]; - var flag_values = [% values || '[]' FILTER none %]; - var flag_visibility = [% visibility || '[]' FILTER none %]; + var groups_str = "[% groups || '[]' FILTER js %]"; + var groups = $.parseJSON(groups_str); + var flag_values_str = "[% values || '[]' FILTER js %]"; + var flag_values = $.parseJSON(flag_values_str); + var flag_visibility_str = "[% visibility || '[]' FILTER js %]"; + var flag_visibility = $.parseJSON(flag_visibility_str); </script> <div id="edit_mode"> @@ -50,6 +53,7 @@ var selected_components = [ <input type="hidden" name="values" id="values" value=""> <input type="hidden" name="visibility" id="visibility" value=""> <input type="hidden" name="save" value="1"> +<input type="hidden" name="token" value="[% issue_hash_token(['tracking_flags_edit']) FILTER html %]"> [%# name/desc/etc %] |