diff options
| author | Filipa Lacerda <filipa@gitlab.com> | 2018-08-09 14:05:13 +0300 |
|---|---|---|
| committer | Jose Vargas <jvargas@gitlab.com> | 2018-08-29 00:36:25 +0300 |
| commit | ec40b36905d0a71edb4bfae592018b6ae580a492 (patch) | |
| tree | f3fa27efe3afcda934b8b055fdd54273a6020053 /lib | |
| parent | e271b302c481d74a6e9fa43a8328821f96bc5b89 (diff) | |
Removes <br> sent from backend on tooltips in jobs
When backend sends HTML it requires frontend to append it to the DOM causing
XSS vulnerabilities. By removing the `<br>` we avoid those vulnerabilities
Diffstat (limited to 'lib')
| -rw-r--r-- | lib/gitlab/ci/status/build/failed.rb | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/lib/gitlab/ci/status/build/failed.rb b/lib/gitlab/ci/status/build/failed.rb index 703f0b9217b..508b4814631 100644 --- a/lib/gitlab/ci/status/build/failed.rb +++ b/lib/gitlab/ci/status/build/failed.rb @@ -32,7 +32,7 @@ module Gitlab end def description - "<br> (#{failure_reason_message})" + "- (#{failure_reason_message})" end def failure_reason_message |