Merge "Related-Bug: #1657280 - Sanitizing the values for introspect p…

…age. For others its handled in the core."
Juniper · Mar 10, 2017 · c2afcc7 · c2afcc7
2 parents d8b15b9 + 82faee3
commit c2afcc7
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/webroot/setting/introspect/ui/js/views/IntrospectJSGridView.js b/webroot/setting/introspect/ui/js/views/IntrospectJSGridView.js
@@ -95,6 +95,7 @@ define([
         }
 
         _.each(dataRecord, function (value, key) {
+            value = JSON.parse(cowu.sanitize(JSON.stringify(value)));
             if (key.charAt(0) !== "_" && ["more", "next_batch"].indexOf(key) === -1 ) {
                 var gridColumn = {
                     id: key, field: key,
@@ -106,7 +107,7 @@ define([
                 if (contrail.checkIfExist(value._link)) {
                     gridColumn.formatter = function (r, c, v, cd, dc) {
                         return '<a class="introspect-link" data-link="' + value._link + '" ' +
-                            'x="' + dc[key] + '">' + dc[key] + "</a>";
+                            'x="' + cowu.sanitize(dc[key]) + '">' + cowu.sanitize(dc[key]) + "</a>";
                     };
                     gridColumn.exportConfig = { allow: true };