Sanitize: do not escape forward slash (#65416)

pull/65475/head
Kristian Bremberg 2 years ago committed by GitHub
parent 09ff5ab522
commit 420aeb3bec
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
  1. 1
      packages/grafana-data/src/text/sanitize.ts
  2. 2
      public/app/features/templating/template_srv.test.ts

@ -85,6 +85,5 @@ export function escapeHtml(str: string): string {
.replace(/</g, '&lt;')
.replace(/>/g, '&gt;')
.replace(/'/g, '&#39;')
.replace(/\//g, '&#47;')
.replace(/"/g, '&quot;');
}

@ -420,7 +420,7 @@ describe('templateSrv', () => {
{ type: 'query', name: 'test', current: { value: '<script>alert(asd)</script>' } },
]);
const target = _templateSrv.replace('$test', {}, 'html');
expect(target).toBe('&lt;script&gt;alert(asd)&lt;&#47;script&gt;');
expect(target).toBe('&lt;script&gt;alert(asd)&lt;/script&gt;');
});
});

Loading…
Cancel
Save