Sutty/trabajo-afectivo
5
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

Improved input validation.

Browse source
This commit is contained in:
Martin Edenhofer 2015-01-27 08:50:40 +01:00
parent 47f94c54d6
commit 5e0ae554f9
3 changed files with 17 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

15
app/assets/javascripts/app/lib/app_post/task_manager.js.coffee
View file

@ -271,8 +271,12 @@ class _taskManagerSingleton extends App.Controller
) )
@allTasks = allTasks || [] @allTasks = allTasks || []
$('#content_permanent_' + key ).html('') try
$('#content_permanent_' + key ).remove() $('#content_permanent_' + key ).html('')
$('#content_permanent_' + key ).remove()
catch
@log 'notice', "invalid key '#{key}'"
delete @workersStarted[ key ] delete @workersStarted[ key ]
delete @workers[ key ] delete @workers[ key ]
@ -304,8 +308,11 @@ class _taskManagerSingleton extends App.Controller
# release tasks # release tasks
for task in @allTasks for task in @allTasks
$('#content_permanent_' + task.key ).html('') try
$('#content_permanent_' + task.key ).remove() $('#content_permanent_' + task.key ).html('')
$('#content_permanent_' + task.key ).remove()
catch
@log 'notice', "invalid key '#{key}'"
delete @workersStarted[ task.key ] delete @workersStarted[ task.key ]
delete @workers[ task.key ] delete @workers[ task.key ]

2
app/assets/javascripts/app/lib/app_post/utils.js.coffee
View file

@ -193,4 +193,4 @@ class App.Utils
# cleanString = App.Utils.htmlAttributeCleanup( string ) # cleanString = App.Utils.htmlAttributeCleanup( string )
@htmlAttributeCleanup: (string) -> @htmlAttributeCleanup: (string) ->
string.replace(/(\!|\s|\r|\t|,|\.|\?|"|'|\^|#)/g, '') string.replace(/(\!|\s|\r|\t|,|\.|\?|"|'|\^|#|=|\(|\)|\$)/g, '')

5
public/assets/tests/html-utils.js
View file

@ -592,6 +592,11 @@ test( "check attibute validation", function() {
verify = App.Utils.htmlAttributeCleanup( string ) verify = App.Utils.htmlAttributeCleanup( string )
equal( verify, result, string ) equal( verify, result, string )
string = 'abc()=$'
result = 'abc'
verify = App.Utils.htmlAttributeCleanup( string )
equal( verify, result, string )
}); });