Form field sanitization (#3699)

* Sanitize input string when using select2 search on forms

* CSS tweaks for images in card view
This commit is contained in:
Oliver 2022-09-21 11:59:54 +10:00 committed by GitHub
parent 04b3f022a0
commit e6225bd8b5
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
4 changed files with 12 additions and 2 deletions

View File

@ -839,6 +839,11 @@ input[type="submit"] {
padding: 10px;
}
.card-thumb {
max-width: 64px;
max-height: 64px;
}
.float-right {
float: right;
}

View File

@ -1727,7 +1727,8 @@ function initializeRelatedField(field, fields, options={}) {
var query = field.filters || {};
// Add search and pagination options
query.search = params.term;
query.search = sanitizeInputString(params.term);
query.offset = offset;
query.limit = pageSize;

View File

@ -379,6 +379,10 @@ function setupNotesField(element, url, options={}) {
*/
function sanitizeInputString(s, options={}) {
if (!s) {
return s;
}
// Remove ASCII control characters
s = s.replace(/[\x01-\x1F]+/g, '');

View File

@ -1356,7 +1356,7 @@ function partGridTile(part) {
<div class='panel-content'>
<div class='row'>
<div class='col-sm-4'>
<img src='${part.thumbnail}' style='width: 100%;' class='card-thumb' onclick='showModalImage("${part.image}")'>
<img src='${part.thumbnail}' class='card-thumb' onclick='showModalImage("${part.image}")'>
</div>
<div class='col-sm-8'>
<table class='table table-striped table-condensed'>