From 17bd45b6fcc4bfc58f9d45dd7098450ca394abb5 Mon Sep 17 00:00:00 2001 From: bohung Date: Tue, 1 Nov 2022 13:20:14 +0800 Subject: [PATCH] Fix vulnerable. --- app/assets/javascripts/event_news/wpex.js | 7 +++++-- app/helpers/event_news_helper.rb | 2 +- 2 files changed, 6 insertions(+), 3 deletions(-) diff --git a/app/assets/javascripts/event_news/wpex.js b/app/assets/javascripts/event_news/wpex.js index d67a8c4..5bc9aa1 100644 --- a/app/assets/javascripts/event_news/wpex.js +++ b/app/assets/javascripts/event_news/wpex.js @@ -2461,10 +2461,13 @@ $.fn.wpexEqualHeights = function (options) { var elID = $this.attr( 'id' ); var elClass = elID ? ' wpex-' + elID : ''; if ( $this.is( ':visible' ) ) { + var wpex_wrap = $('
'); + wpex_wrap.insertBefore($this); + wpex_wrap.append($this); if ( $this.attr( 'multiple' ) ) { - $this.wrap( '
' ); + wpex_wrap.attr('class', 'wpex-multiselect-wrap' + elClass); } else { - $this.wrap( '
' ); + wpex_wrap.attr('class', 'wpex-select-wrap' + elClass); } } } ); diff --git a/app/helpers/event_news_helper.rb b/app/helpers/event_news_helper.rb index a3ee097..879a812 100644 --- a/app/helpers/event_news_helper.rb +++ b/app/helpers/event_news_helper.rb @@ -330,7 +330,7 @@ module EventNewsHelper if @target_action == "index" - filename = overridehtml.nil? ? params[:layout_type].to_s.split('/').last : overridehtml + filename = File.basename(overridehtml.nil? ? params[:layout_type] : overridehtml) f = File.join(Rails.root, 'app', 'templates', "#{@key}", 'modules', 'event_news_mod', "#{filename}.html.erb") if !File.exists?f f = File.join(Rails.root, 'app', 'templates', "#{@key}", 'modules', 'event_news_mod', "index.html.erb")