yv01p/Umbraco-CMS
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge pull request #959 from umbraco/temp-U4-7477

Browse Source 
U4-7477 xss char stripping on data type names is being too agressive
This commit is contained in:
Claus
2015-12-16 14:01:12 +01:00
parent 20c48a2daf bdc7837f63
commit 2729069b00
2 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
src/Umbraco.Web/Editors/DataTypeValidateAttribute.cs
View File

@@ -42,8 +42,8 @@ namespace Umbraco.Web.Editors
{
var dataType = (DataTypeSave)actionContext.ActionArguments["dataType"];
dataType.Name = dataType.Name.CleanForXss();
dataType.Alias = dataType.Name.CleanForXss();
dataType.Name = dataType.Name.CleanForXss('[', ']', '(', ')');
dataType.Alias = dataType.Name.CleanForXss('[', ']', '(', ')');
//Validate that the property editor exists
var propertyEditor = PropertyEditorResolver.Current.GetByAlias(dataType.SelectedEditor);

4
src/Umbraco.Web/WebServices/SaveFileController.cs
View File

@@ -156,8 +156,8 @@ namespace Umbraco.Web.WebServices
{
t = new Template(templateId)
{
Text = templateName.CleanForXss(),
Alias = templateAlias.CleanForXss(),
Text = templateName.CleanForXss('[', ']', '(', ')'),
Alias = templateAlias.CleanForXss('[', ']', '(', ')'),
Design = templateContents
};