kenmirrors/grocy
1
0
Fork 0
mirror of https://github.com/grocy/grocy.git synced 2025-08-18 11:27:03 +00:00
Code Issues Projects Releases Wiki Activity

Escape HTML when displaying recipes on /mealplan (references #1868)

Browse Source
This commit is contained in:
Bernd Bestel
2022-04-21 21:32:28 +02:00
parent c4388a6f8f
commit 845e69fb96
2 changed files with 7 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
public/viewjs/mealplan.js
View File

@@ -139,6 +139,8 @@ $(".calendar").each(function()
return false;
}
recipe.name = recipe.name.escapeHTML();
var internalShadowRecipe = FindObjectInArrayByPropertyValue(internalRecipes, "name", mealPlanEntry.day + "#" + mealPlanEntry.id);
var resolvedRecipe = FindObjectInArrayByPropertyValue(recipesResolved, "recipe_id", internalShadowRecipe.id);