TryGhost/Ghost
1
0
Fork 0
mirror of https://github.com/TryGhost/Ghost.git synced 2025-01-04 17:04:59 +03:00
Code Issues Projects Releases Wiki Activity

Fixed sanitization issue in subscribers

Browse Source 
no issue

- Added sanitization to subscribed_url & subscribed_referrer fields when rendering error state

Credits: Antony Garand
This commit is contained in:
Nazar Gargol 2018-10-29 10:19:45 +01:00
parent b8fff2321c
commit 308b9ddd40
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
core/server/apps/subscribers/lib/router.js
View File

@ -32,6 +32,8 @@ function _renderer(req, res) {
*/ */
function errorHandler(error, req, res, next) { function errorHandler(error, req, res, next) {
req.body.email = ''; req.body.email = '';
req.body.subscribed_url = santizeUrl(req.body.subscribed_url);
req.body.subscribed_referrer = santizeUrl(req.body.subscribed_referrer);
if (error.statusCode !== 404) { if (error.statusCode !== 404) {
res.locals.error = error; res.locals.error = error;