Andreas/wekan
1
0
Fork 0
mirror of https://github.com/wekan/wekan.git synced 2026-02-17 05:28:06 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions 5

Fix DOMPurify paths.

Browse source 
Thanks to xet7 !
This commit is contained in:
Lauri Ojansivu 2025-10-11 00:49:43 +03:00
parent 573d4bf2cb
commit 90899f0928
9 changed files with 12 additions and 12 deletions
Download patch file Download diff file Expand all files Collapse all files

4
models/lists.js
View file

@ -315,7 +315,7 @@ Lists.mutations({
rename(title) {
// Sanitize title on client side as well
if (typeof title === 'string') {
const { sanitizeTitle } = require('/server/lib/inputSanitizer');
const { sanitizeTitle } = require('../server/lib/inputSanitizer');
const sanitizedTitle = sanitizeTitle(title);
if (process.env.DEBUG === 'true' && sanitizedTitle !== title) {
console.warn('Client-side sanitized list title:', title, '->', sanitizedTitle);
@ -653,7 +653,7 @@ if (Meteor.isServer) {
// Update title if provided
if (req.body.title) {
const { sanitizeTitle } = require('/server/lib/inputSanitizer');
const { sanitizeTitle } = require('../server/lib/inputSanitizer');
const newTitle = sanitizeTitle(req.body.title);
if (process.env.DEBUG === 'true' && newTitle !== req.body.title) {