kotovalexarian-likes-github/mperham--sidekiq
1
0
Fork 0
mirror of https://github.com/mperham/sidekiq.git synced 2022-11-09 13:52:34 -05:00
Code Releases Activity

use Rack::Utils.escape_html in Sidekiq::Web escape helper

Browse source 
ERB::Util.h doesn't escape apostrophes and slash.

  Rack::Utils.escape_html is more performant and also escapes all char recommended by OWASP. (https://github.com/rack/rack/issues/27)
This commit is contained in:
Julian Langschaedel 2013-10-30 22:09:20 +01:00
parent 2c049bdaba
commit 2243426914
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
lib/sidekiq/web_helpers.rb
View file

@ -159,7 +159,7 @@ module Sidekiq
end
def h(text)
ERB::Util.h(text)
Rack::Utils.escape_html(text)
end
# Any paginated list that performs an action needs to redirect