alois/Verso
1
1
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge pull request #3760 from overleaf/jpa-xss-5

Browse Source 
[views] mitigate Angular XSS on new project from template POST gateway

GitOrigin-RevId: a19de060cad0baf2822d1b6df419bbe1a2361ea4
This commit is contained in:
Jakob Ackermann
2021-03-17 14:29:56 +01:00
committed by Copybot
parent f353728bda
commit 1e2ed05bed
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
services/web/app/views/project/editor/new_from_template.pug
+1 -1
View File
@@ -13,7 +13,7 @@ block content
span.loading-screen-ellip .
span.loading-screen-ellip .
form(id='create_form' method='POST' action='/project/new/template/')
form(id='create_form' method='POST' action='/project/new/template/' ng-non-bindable)
input(type="hidden", name="_csrf", value=csrfToken)
input(type="hidden" name="templateId" value=templateId)
input(type="hidden" name="templateVersionId" value=templateVersionId)