From 68794061a53f48ce17b72b9821cce9fb86daa0c1 Mon Sep 17 00:00:00 2001 From: Mcat12 Date: Sat, 24 Jun 2017 22:31:31 -0400 Subject: [PATCH] Use DataTable's safe renderer in query log See https://datatables.net/manual/security --- scripts/pi-hole/js/queries.js | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/scripts/pi-hole/js/queries.js b/scripts/pi-hole/js/queries.js index 43952e47..54c3ea71 100644 --- a/scripts/pi-hole/js/queries.js +++ b/scripts/pi-hole/js/queries.js @@ -175,8 +175,8 @@ $(document).ready(function() { "columns": [ { "width" : "20%", "render": function (data, type, full, meta) { if(type === "display"){return moment.unix(data).format("Y-MM-DD HH:mm:ss z");}else{return data;} }}, { "width" : "10%" }, - { "width" : "40%" }, - { "width" : "10%" }, + { "width" : "40%", "render": $.fn.dataTable.render.text() }, + { "width" : "10%", "render": $.fn.dataTable.render.text() }, { "width" : "10%" }, { "width" : "10%" }, ],