alex
/
orbit4-5
forked from saurabh/orbit4-5
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

xss issue fixed

This commit is contained in:
Harry Bomrah 2015-05-26 16:02:16 +08:00
parent d26a5bedb7
commit 2fc15eab29
1 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
app/views/orbit_bar/index.html.erb
View File

@ -15,7 +15,6 @@
</div>
<div class="login-body">
<%= form_tag "/sessions?locale=#{locale.to_s}", method: "post", :class => "container" do |f| %>
<input type="hidden" name="referer_url" value="<%= request.original_url %>">
<div class="prepend">
<span class="add"><i class="icon-user"></i></span>
<input class="input" id="user_user_id" name="user_name" placeholder="<%= t("users.user_id") %>" size="30" type="text">
@ -182,4 +181,8 @@
$("#user_user_id").focus();
}
})
$(".login-body form").on("submit",function(){
$(this).append("<input type='hidden' name='referer_url' value='<%= request.original_url %>'/>");
})
</script>