mirror of
https://github.com/inventree/InvenTree
synced 2024-08-30 18:33:04 +00:00
Form field sanitization (#3699)
* Sanitize input string when using select2 search on forms * CSS tweaks for images in card view
This commit is contained in:
parent
04b3f022a0
commit
e6225bd8b5
@ -839,6 +839,11 @@ input[type="submit"] {
|
||||
padding: 10px;
|
||||
}
|
||||
|
||||
.card-thumb {
|
||||
max-width: 64px;
|
||||
max-height: 64px;
|
||||
}
|
||||
|
||||
.float-right {
|
||||
float: right;
|
||||
}
|
||||
|
@ -1727,7 +1727,8 @@ function initializeRelatedField(field, fields, options={}) {
|
||||
var query = field.filters || {};
|
||||
|
||||
// Add search and pagination options
|
||||
query.search = params.term;
|
||||
query.search = sanitizeInputString(params.term);
|
||||
|
||||
query.offset = offset;
|
||||
query.limit = pageSize;
|
||||
|
||||
|
@ -379,6 +379,10 @@ function setupNotesField(element, url, options={}) {
|
||||
*/
|
||||
function sanitizeInputString(s, options={}) {
|
||||
|
||||
if (!s) {
|
||||
return s;
|
||||
}
|
||||
|
||||
// Remove ASCII control characters
|
||||
s = s.replace(/[\x01-\x1F]+/g, '');
|
||||
|
||||
|
@ -1356,7 +1356,7 @@ function partGridTile(part) {
|
||||
<div class='panel-content'>
|
||||
<div class='row'>
|
||||
<div class='col-sm-4'>
|
||||
<img src='${part.thumbnail}' style='width: 100%;' class='card-thumb' onclick='showModalImage("${part.image}")'>
|
||||
<img src='${part.thumbnail}' class='card-thumb' onclick='showModalImage("${part.image}")'>
|
||||
</div>
|
||||
<div class='col-sm-8'>
|
||||
<table class='table table-striped table-condensed'>
|
||||
|
Loading…
Reference in New Issue
Block a user