Merge pull request +11413 from c9/fix-xss

Fix xss
This commit is contained in:
Fabian Jakobs 2016-01-07 15:44:43 +01:00
commit 119ea0fd79
2 changed files with 16 additions and 3 deletions

View File

@ -1,6 +1,9 @@
<html>
<head>
<meta charset='utf-8'>
<meta charset='utf-8'>
<meta id="page-data"
data-retry-in="<%= retryIn %>"
>
<title><%=title%></title>
<link rel="stylesheet" type="text/css" href="<%=staticPrefix%>/error_handler/style.css" />
</head>
@ -17,9 +20,11 @@
<a href="https://c9.io">Home</a>
</div>
<script>
var data = document.getElementById("page-data").dataset;
setTimeout(function() {
window.location.reload();
}, <%=retryIn%>)
}, parseInt(data.retryIn, 10))
</script>
</body>

View File

@ -2,7 +2,13 @@
<html>
<head>
<meta charset="utf-8">
<meta id="page-data"
data-static-prefix="<%= staticPrefix %>"
data-architect-config="<%= JSON.stringify(architectConfig, null, 2) %>"
>
<title>Cloud9</title>
<script>
// For node-webkit
var nRequire = window.require;
@ -29,7 +35,9 @@
<script src="/configs/require_config.js"></script>
<% } %>
<script>
var plugins = <%-: architectConfig | JSONToJS %>;
var data = document.getElementById("page-data").dataset;
var plugins = JSON.parse(data.architectConfig);
var start = Date.now();
<% if (packed) { %>