Fix security issue

cenobites · Jan 19, 2024 · fa65099 · fa65099
1 parent b594f04
commit fa65099
Show file tree

Hide file tree

Showing 4 changed files with 7 additions and 3 deletions.
diff --git a/src/flask_jsonrpc/contrib/browse/static/js/apps/browse/services.js b/src/flask_jsonrpc/contrib/browse/static/js/apps/browse/services.js
@@ -76,6 +76,10 @@
         .factory('RPC', ['$http', '$location', 'serverUrls', 'UUID', function($http, $location, serverUrls, UUID) {
             return {
                 getValue: function(param) {
+                    if (!param.value) {
+                        return param.value;
+                    }
+
                     if (param.type === 'Object') {
                         return eval('('+ param.value + ')');
                     } else if (param.type === 'Number') {

diff --git a/src/flask_jsonrpc/contrib/browse/static/js/libs/jquery/jquery-1.8.1-min.js b/src/flask_jsonrpc/contrib/browse/static/js/libs/jquery/jquery-1.8.1-min.js
diff --git a/src/flask_jsonrpc/contrib/browse/static/js/libs/jquery/jquery-3.7.1.min.js b/src/flask_jsonrpc/contrib/browse/static/js/libs/jquery/jquery-3.7.1.min.js
diff --git a/src/flask_jsonrpc/contrib/browse/templates/layout.html b/src/flask_jsonrpc/contrib/browse/templates/layout.html
@@ -58,7 +58,7 @@
   {% block footer %}{% endblock %}
 
   {% block script %}
-  <script type="text/javascript" src="{{ url_for('urn:browse.static', filename='js/libs/jquery/jquery-1.8.1-min.js') }}"></script>
+  <script type="text/javascript" src="{{ url_for('urn:browse.static', filename='js/libs/jquery/jquery-3.7.1.min.js') }}"></script>
   <script type="text/javascript" src="{{ url_for('urn:browse.static', filename='js/libs/angular/angular.min.js') }}"></script>
   <script type="text/javascript" src="{{ url_for('urn:browse.static', filename='js/libs/angular/angular-route.min.js') }}"></script>
   <script type="text/javascript" src="{{ url_for('urn:browse.static', filename='js/libs/angular/angular-resource.min.js') }}"></script>