mirror of
https://github.com/inventree/InvenTree.git
synced 2025-07-01 03:00:54 +00:00
Sanitize search text in bootstrap table (#3609)
* Sanitize search text in bootstrap table * Clean search query on the server side before rendering search page template - Refactor existing sanitizing code into functions * Make ASCII and Unicode cleaning optional
This commit is contained in:
@ -346,7 +346,9 @@ function convertQueryParameters(params, filters) {
|
||||
if ('original_search' in params) {
|
||||
var search = params['search'] || '';
|
||||
|
||||
params['search'] = search + ' ' + params['original_search'];
|
||||
var clean_search = sanitizeInputString(search + ' ' + params['original_search']);
|
||||
|
||||
params['search'] = clean_search;
|
||||
|
||||
delete params['original_search'];
|
||||
}
|
||||
|
Reference in New Issue
Block a user