fix security issue #1556 & #1555

JisanAR03 · DonnieBLT · commit 112ad81dbc02 · 2023-11-02T17:06:55.000-04:00
diff --git a/website/templates/issue.html b/website/templates/issue.html
@@ -414,7 +414,7 @@ <h3>Comments:</h3>
 <script type="text/javascript">
     function sanitizeURL(url) {
         var a = document.createElement('a');
-        a.href = url;
+        a.href = encodeURI(url);
         return a.href;
     }
     

Original file line number	Diff line number	Diff line change
`@@ -414,7 +414,7 @@ <h3>Comments:</h3>`
`414`	`414`	`<script type="text/javascript">`
`415`	`415`	`function sanitizeURL(url) {`
`416`	`416`	`var a = document.createElement('a');`
`417`		`- a.href = url;`
	`417`	`+ a.href = encodeURI(url);`
`418`	`418`	`return a.href;`
`419`	`419`	`}`
`420`	`420`