admin/CLICD
1
0
Fork 0
mirror of https://github.com/MengMengCode/CLICD.git synced 2026-08-08 14:34:49 +08:00
Code Issues Packages Projects Releases Wiki Activity

Potential fix for code scanning alert no. 28: DOM text reinterpreted as HTML

Browse Source 
Patch

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
This commit is contained in:
Meng Meng
2026-06-12 12:00:38 +08:00
committed by GitHub
parent 819a79e00d
commit baf213e769
1 changed files with 6 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Mofang/templates/firewall.html
+6 -3
View File
@@ -204,9 +204,12 @@
return; return;
} }
rulesContainer.innerHTML = currentRules.map(function(rule, idx) { rulesContainer.innerHTML = currentRules.map(function(rule, idx) {
var dir = (rule.direction || 'in').toLowerCase(); var dirRaw = String(rule.direction || 'in').toLowerCase();
var proto = (rule.protocol || 'tcp').toLowerCase(); var protoRaw = String(rule.protocol || 'tcp').toLowerCase();
var action = (rule.action || 'ACCEPT').toUpperCase(); var actionRaw = String(rule.action || 'ACCEPT').toUpperCase();
var dir = (dirRaw === 'in' || dirRaw === 'out') ? dirRaw : 'in';
var proto = (protoRaw === 'tcp' || protoRaw === 'udp' || protoRaw === 'icmp' || protoRaw === 'all') ? protoRaw : 'tcp';
var action = (actionRaw === 'ACCEPT' || actionRaw === 'DROP' || actionRaw === 'REJECT') ? actionRaw : 'ACCEPT';
var port = escapeHtml(portDisplay(rule.port)); var port = escapeHtml(portDisplay(rule.port));
var srcIp = escapeHtml(sourceIpDisplay(rule.source_ip)); var srcIp = escapeHtml(sourceIpDisplay(rule.source_ip));
var desc = escapeHtml(rule.description || ''); var desc = escapeHtml(rule.description || '');