Skip to content

Commit

Permalink
Merge pull request #3028 from rabbitmq/mk-sanitize-username-after-update
Browse files Browse the repository at this point in the history
Escape username before displaying it

(cherry picked from commit a8dffdf)
  • Loading branch information
michaelklishin committed May 6, 2021
1 parent e48ff18 commit a737358
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion deps/rabbitmq_management/priv/www/js/dispatcher.js
Original file line number Diff line number Diff line change
Expand Up @@ -189,7 +189,7 @@ dispatcher_add(function(sammy) {
res = sync_put(this, '/users/:username');
if (res) {
if (res.http_status === 204) {
username = res.req_params.username;
username = fmt_escape_html(res.req_params.username);
show_popup('warn', "Updated an existing user: '" + username + "'");
}
update();
Expand Down

0 comments on commit a737358

Please sign in to comment.