github/overleaf
1
0
Fork 0
mirror of https://github.com/overleaf/overleaf.git synced 2025-03-22 02:04:31 +00:00
Code Issues Projects Releases Packages Wiki Activity

Merge pull request #3760 from overleaf/jpa-xss-5

Browse source 
[views] mitigate Angular XSS on new project from template POST gateway

GitOrigin-RevId: a19de060cad0baf2822d1b6df419bbe1a2361ea4
This commit is contained in:
Jakob Ackermann 2021-03-17 14:29:56 +01:00 committed by Copybot
parent f353728bda
commit 1e2ed05bed
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
services/web/app/views/project/editor/new_from_template.pug
View file

@ -13,7 +13,7 @@ block content
span.loading-screen-ellip .
span.loading-screen-ellip .
form(id='create_form' method='POST' action='/project/new/template/')
form(id='create_form' method='POST' action='/project/new/template/' ng-non-bindable)
input(type="hidden", name="_csrf", value=csrfToken)
input(type="hidden" name="templateId" value=templateId)
input(type="hidden" name="templateVersionId" value=templateVersionId)