7x31
/
nginxconfig.io
mirror of https://github.com/digitalocean/nginxconfig.io.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

К-122672: Добавили экранирование тегов в onion, server и https компонента

This commit is contained in:
Владислав Филатов 2022-04-07 18:33:09 +04:00
parent d8e7addab6
commit c9ee8455e0
3 changed files with 16 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
src/nginxconfig/templates/domain_sections/onion.vue
View File

@ -102,6 +102,8 @@ THE SOFTWARE.
watch: {
'$props.data.onionLocation': {
handler(data) {
data.computed = data.computed.replace(/</, '&lt;');
data.computed = data.computed.replace(/>/, '&gt;');
// Drop http(s)://
data.computed = data.computed.replace(/^https?:\/\//, '');
},

17
src/nginxconfig/templates/domain_sections/server.vue
View File

@ -208,7 +208,9 @@ THE SOFTWARE.
watch: {
'$props.data.domain': {
handler(data) {
data.computed = data.computed.replace(/<.+>/, '');
data.computed = data.computed.replace(/</, '&lt;');
data.computed = data.computed.replace(/>/, '&gt;');
// Ignore www. if given, enable WWW subdomain
if (data.computed.startsWith('www.')) {
data.computed = data.computed.slice(4);
@ -244,7 +246,9 @@ THE SOFTWARE.
// Ensure there is a default path
'$props.data.path': {
handler(data) {
data.computed = data.computed.replace(/<.+>/, '');
data.computed = data.computed.replace(/</, '&lt;');
data.computed = data.computed.replace(/>/, '&gt;');
if (!data.computed.trim()) {
data.computed = `/var/www/${this.$props.data.domain.computed}`;
}
@ -253,19 +257,22 @@ THE SOFTWARE.
},
'$props.data.documentRoot': {
handler(data) {
data.computed = data.computed.replace(/<.+>/, '');
data.computed = data.computed.replace(/</, '&lt;');
data.computed = data.computed.replace(/>/, '&gt;');
},
deep: true,
},
'$props.data.listenIpv4': {
handler(data) {
data.computed = data.computed.replace(/<.+>/, '');
data.computed = data.computed.replace(/</, '&lt;');
data.computed = data.computed.replace(/>/, '&gt;');
},
deep: true,
},
'$props.data.listenIpv6': {
handler(data) {
data.computed = data.computed.replace(/<.+>/, '');
data.computed = data.computed.replace(/</, '&lt;');
data.computed = data.computed.replace(/>/, '&gt;');
},
deep: true,
},

3
src/nginxconfig/templates/global_sections/https.vue
View File

@ -374,7 +374,8 @@ THE SOFTWARE.
},
'$props.data.letsEncryptCertRoot': {
handler(data) {
data.computed = data.computed.replace(/<.+>/, '');
data.computed = data.computed.replace(/</, '&lt;');
data.computed = data.computed.replace(/>/, '&gt;');
},
deep: true,
},