chalec
/
ctrlv-privatebin
6
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Avoid DOMPurify mess with forward slash in expirationDateString

This commit is contained in:
Haocen Xu 2020-05-30 05:52:15 -04:00
parent 4984194c33
commit 74551f58d7
No known key found for this signature in database
GPG Key ID: 3F0D955A0F6AD729
1 changed files with 6 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
js/privatebin.js
View File

@ -3748,8 +3748,12 @@ jQuery.PrivateBin = (function($, RawDeflate) {
if (expirationDateString !== null) {
emailBody += EOL;
emailBody += BULLET;
emailBody += I18n._(
'This link will expire after %s.',
// avoid DOMPurify mess with forward slash in expirationDateString
emailBody += Helper.sprintf(
I18n._(
'This link will expire after %s.',
'%s'
),
expirationDateString
);
}