Bug #6149 ยป 0001-fixes-6149-fixed-XSS-in-host-YAML-view.patch
| app/controllers/hosts_controller.rb | ||
|---|---|---|
|
begin
|
||
|
respond_to do |format|
|
||
|
format.html { render :text => "<pre>#{@host.info.to_yaml}</pre>" }
|
||
|
format.html { render :text => "<pre>#{ERB::Util.html_escape(@host.info.to_yaml)}</pre>" }
|
||
|
format.yml { render :text => @host.info.to_yaml }
|
||
|
end
|
||
|
rescue
|
||