Discource-C
/
discourse
mirror of https://github.com/discourse/discourse.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

DEV: Fix unsafe binding warnings (#28317) 

e.g.

```
WARNING: Binding style attributes may introduce cross-site scripting vulnerabilities; please ensure that values being bound are properly escaped. For more information, including how to disable this warning, see https://deprecations.emberjs.com/v1.x/#toc_binding-style-attributes. Style affected: \"height: 60px\"
```
This commit is contained in:
Jarek Radosz 2024-08-12 14:06:22 +02:00 committed by GitHub
parent d217a1756d
commit 2a193f2173
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
3 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
app/assets/javascripts/discourse/app/form-kit/components/fk/control/code.gjs
View File

@ -19,7 +19,7 @@ export default class FKControlCode extends Component {
return;
}
return `height: ${htmlSafe(escapeExpression(this.args.height) + "px")}`;
return htmlSafe(`height: ${escapeExpression(this.args.height)}px`);
}
<template>

2
app/assets/javascripts/discourse/app/form-kit/components/fk/control/composer.gjs
View File

@ -17,7 +17,7 @@ export default class FKControlComposer extends Component {
return;
}
return `height: ${htmlSafe(escapeExpression(this.args.height) + "px")}`;
return htmlSafe(`height: ${escapeExpression(this.args.height)}px`);
}
<template>

2
app/assets/javascripts/discourse/app/form-kit/components/fk/control/textarea.gjs
View File

@ -17,7 +17,7 @@ export default class FKControlTextarea extends Component {
return;
}
return `height: ${htmlSafe(escapeExpression(this.args.height) + "px")}`;
return htmlSafe(`height: ${escapeExpression(this.args.height)}px`);
}
<template>