tqt
/
Ghost
mirror of https://github.com/TryGhost/Ghost.git
2
1
Fork 0
Code Issues 1 Releases Wiki Activity

Fixed sanitization issue in subscribers 

no issue

- Added sanitization to subscribed_url & subscribed_referrer fields when rendering error state

Credits: Antony Garand
This commit is contained in:
Nazar Gargol 2018-10-29 10:19:45 +01:00 committed by Fabien O'Carroll
parent eb22429338
commit 305d13e5c4
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
core/server/apps/subscribers/lib/router.js
View File

@ -35,6 +35,8 @@ function _renderer(req, res) {
*/
function errorHandler(error, req, res, next) {
req.body.email = '';
req.body.subscribed_url = santizeUrl(req.body.subscribed_url);
req.body.subscribed_referrer = santizeUrl(req.body.subscribed_referrer);
if (error.statusCode !== 404) {
res.locals.error = error;