diff options
| author | Étienne Loks <etienne.loks@iggdrasil.net> | 2025-11-27 12:59:40 +0100 |
|---|---|---|
| committer | Étienne Loks <etienne.loks@iggdrasil.net> | 2025-11-29 17:17:06 +0100 |
| commit | be82d596a63f4404e6e4deb9aa3c1f69e344ee46 (patch) | |
| tree | fe7a3e926ab872d85c38fda2418c59138db3c934 | |
| parent | c8b0ecdafdb492e72748825d9fa176a1343ff38f (diff) | |
| download | Ishtar-be82d596a63f4404e6e4deb9aa3c1f69e344ee46.tar.bz2 Ishtar-be82d596a63f4404e6e4deb9aa3c1f69e344ee46.zip | |
🔒️ fix security issue for jQuery CVE-2015-9251
https://github.com/jquery/jquery/commit/f60729f3903d17917dc351f3ac87794de379b0cc
| -rw-r--r-- | ishtar_common/static/js/ishtar.js | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/ishtar_common/static/js/ishtar.js b/ishtar_common/static/js/ishtar.js index 634657636..d2d6025d6 100644 --- a/ishtar_common/static/js/ishtar.js +++ b/ishtar_common/static/js/ishtar.js @@ -23,10 +23,18 @@ beforeSend: function(xhr, settings) { } }}); +/* CVE-2020-11022 */ jQuery.htmlPrefilter = function(html) { return html; }; +/* CVE-2015-9251 */ +jQuery.ajaxPrefilter(function(s) { + if ( s.crossDomain ) { + s.contents.script = false; + } +}); + if (typeof String.prototype.endsWith !== 'function') { String.prototype.endsWith = function(suffix) { return this.indexOf(suffix, this.length - suffix.length) !== -1; |