From c1ecafc38319e8f768c9259d4d580e42acd5ee86 Mon Sep 17 00:00:00 2001 From: William Desportes Date: Sat, 30 Mar 2019 12:01:43 +0100 Subject: [PATCH 1/5] Fix security issue, escape database name when saving page on designer Signed-off-by: William Desportes --- js/designer/move.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/js/designer/move.js b/js/designer/move.js index b2ca6b4272..e49e24fcea 100644 --- a/js/designer/move.js +++ b/js/designer/move.js @@ -770,7 +770,7 @@ function Save3 (callback) { var $form = $('
') .append('') - .append('') + .append($('').val(db)) .append('') .append('') .append('