Skip to content
Commit 944b5573 authored by Jo-Philipp Wich's avatar Jo-Philipp Wich
Browse files

luci-mod-system: sshkeys.js: prevent XSS through pubkey comments



Ensure to not display public key comments verbatim in order to prevent
injection of markup.

Reported-by: default avatarEric McDonald <ericmcdonald@protonmail.com>
Signed-off-by: default avatarJo-Philipp Wich <jo@mein.io>
parent 68453ff1
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment