BetterDesk/web-nodejs/lib/escapeHtml.js at sync/main-to-dev-3.4.3 - BetterDesk - Grace Solutions

gsadmin/BetterDesk

mirror of https://github.com/UNITRONIX/BetterDesk.git synced 2026-09-10 17:45:42 +00:00

Files

T

UNITRONIX c2aedb10fe Enhance security and input validation across CDAP and organization routes

- Implemented input validation for `orgId` and `deviceId` in CDAP and organization detail routes using `assertSafeApiId`, returning a 400 error for invalid inputs.
- Added HTML escaping for `deviceId` and `orgId` in views to prevent XSS vulnerabilities.
- Hardened `patch-role-scope-i18n.js` against prototype pollution with a guard for unsafe nested keys.
- Updated CodeQL configuration to include new exclusions and ensure documented exclusions are applied.

2026-07-09 21:16:55 +02:00

16 lines

350 B

JavaScript

Raw Permalink Blame History

 'use strict';
 /**
  * Escape HTML text for safe insertion into server-rendered templates.
  */
 function escapeHtml(value) {
     return String(value ?? '')
         .replace(/&/g, '&amp;')
         .replace(/</g, '&lt;')
         .replace(/>/g, '&gt;')
         .replace(/"/g, '&quot;')
         .replace(/'/g, '&#39;');
 }
 module.exports = { escapeHtml };