update user.ui key, fix xss vuln
This commit is contained in:
parent
a5295f284d
commit
fea89a9837
1 changed files with 6 additions and 3 deletions
|
@ -20,7 +20,10 @@ oml.ui.findForm = function(list) {
|
|||
values: ui._lists.filter(function(list) {
|
||||
return Ox.contains(['library', 'static'], list.type);
|
||||
}).map(function(list) {
|
||||
return {id: list.id, title: list.title};
|
||||
return {
|
||||
id: list.id,
|
||||
title: Ox.encodeHTMLEntities(list.title)
|
||||
};
|
||||
})
|
||||
}]),
|
||||
list: list ? null : {
|
||||
|
@ -37,7 +40,7 @@ oml.ui.findForm = function(list) {
|
|||
id: list.id,
|
||||
query: data.value
|
||||
} : {}, function(result) {
|
||||
if (list || ui.updateAdvancedFindResults) {
|
||||
if (list || ui.updateResults) {
|
||||
updateResults();
|
||||
}
|
||||
});
|
||||
|
@ -46,7 +49,7 @@ oml.ui.findForm = function(list) {
|
|||
.appendTo(that);
|
||||
|
||||
function updateResults() {
|
||||
if (list || ui.updateAdvancedFindResults) {
|
||||
if (list || ui.updateResults) {
|
||||
Ox.Request.clearCache();
|
||||
oml.$ui.list.reloadList();
|
||||
oml.$ui.filters.forEach(function($filter) {
|
||||
|
|
Loading…
Reference in a new issue