This is an automated email from the ASF dual-hosted git repository. jleroux pushed a commit to branch trunk in repository https://gitbox.apache.org/repos/asf/ofbiz-framework.git
The following commit(s) were added to refs/heads/trunk by this push: new a201894 Improved: Fix OFBiz specific Javascript security issues reported by GH CodeQL (OFBIZ-12366) a201894 is described below commit a201894d5c93c66750d849350e10e21eaf9d1c85 Author: Jacques Le Roux <jacques.le.r...@les7arts.com> AuthorDate: Thu Nov 11 09:03:32 2021 +0100 Improved: Fix OFBiz specific Javascript security issues reported by GH CodeQL (OFBIZ-12366) Oops, fixes a syntax issue --- themes/common-theme/webapp/common/js/util/OfbizUtil.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/themes/common-theme/webapp/common/js/util/OfbizUtil.js b/themes/common-theme/webapp/common/js/util/OfbizUtil.js index d7e4cc2..2bdc5c5 100644 --- a/themes/common-theme/webapp/common/js/util/OfbizUtil.js +++ b/themes/common-theme/webapp/common/js/util/OfbizUtil.js @@ -879,7 +879,7 @@ function ajaxAutoCompleter(areaCsvString, showDescription, defaultMinLength, def var queryArgs = {"term": request.term}; if (typeof args == "object" && jQuery.isArray(args)) { for (var i = 0; i < args.length; i++) { - queryArgs["parm" + i] = jQuery(DOMPurify.sanitize(args[i]).val() + queryArgs["parm" + i] = jQuery(DOMPurify.sanitize(args[i]).val()) } } jQuery.ajax({