mirror of https://github.com/MISP/MISP
chg: [elements:serverRuleElements] Added preventive sanitizations
parent
f6f6b102f6
commit
14a34dfbca
|
@ -5,7 +5,7 @@ $seed = rand();
|
||||||
<div style="display: flex;" class="rules-widget-container container-seed-<?= $seed ?>" data-funname="initRuleWidgetPicker<?= $seed ?>">
|
<div style="display: flex;" class="rules-widget-container container-seed-<?= $seed ?>" data-funname="initRuleWidgetPicker<?= $seed ?>">
|
||||||
<div style="flex-grow: 1;">
|
<div style="flex-grow: 1;">
|
||||||
<div class="bold green" style="display: flex; align-items: center;">
|
<div class="bold green" style="display: flex; align-items: center;">
|
||||||
<?= __('Allowed %s (OR)', Inflector::pluralize($scopeI18n));?>
|
<?= __('Allowed %s (OR)', Inflector::pluralize(h($scopeI18n)));?>
|
||||||
<i
|
<i
|
||||||
class="useCursorPointer <?= $this->FontAwesome->getClass('trash') ?>"
|
class="useCursorPointer <?= $this->FontAwesome->getClass('trash') ?>"
|
||||||
style="margin-left: auto;"
|
style="margin-left: auto;"
|
||||||
|
@ -14,7 +14,7 @@ $seed = rand();
|
||||||
></i>
|
></i>
|
||||||
</div>
|
</div>
|
||||||
<select
|
<select
|
||||||
id="<?= sprintf('%s%sLeftValues', Inflector::pluralize($scope), $technique) ?>"
|
id="<?= sprintf('%s%sLeftValues', Inflector::pluralize(h($scope)), h($technique)) ?>"
|
||||||
size="6" multiple
|
size="6" multiple
|
||||||
style="margin-bottom: 0; width: 100%; overflow-x: auto;" class="rules-select-data rules-allow"
|
style="margin-bottom: 0; width: 100%; overflow-x: auto;" class="rules-select-data rules-allow"
|
||||||
></select>
|
></select>
|
||||||
|
@ -25,19 +25,19 @@ $seed = rand();
|
||||||
<button
|
<button
|
||||||
class="btn"
|
class="btn"
|
||||||
type="button"
|
type="button"
|
||||||
title="<?= __('Move %s to the list of %s to allow', $scopeI18n, Inflector::pluralize($scopeI18n));?>"
|
title="<?= __('Move %s to the list of %s to allow', h($scopeI18n), Inflector::pluralize(h($scopeI18n)));?>"
|
||||||
aria-label="<?= __('Move %s to the list of %s to allow', $scopeI18n, Inflector::pluralize($scopeI18n));?>"
|
aria-label="<?= __('Move %s to the list of %s to allow', h($scopeI18n), Inflector::pluralize(h($scopeI18n)));?>"
|
||||||
role="button" tabindex="0"
|
role="button" tabindex="0"
|
||||||
onClick="<?= sprintf("handleFreetextButtonClick('%s', this); ", 'rules-allow') ?>"
|
onClick="<?= sprintf("handleFreetextButtonClick('%s', this); ", 'rules-allow') ?>"
|
||||||
>
|
>
|
||||||
<i class="<?= $this->FontAwesome->getClass('caret-left') ?>"></i>
|
<i class="<?= $this->FontAwesome->getClass('caret-left') ?>"></i>
|
||||||
</button>
|
</button>
|
||||||
<input type="text" style="" placeholder="<?= sprintf('Freetext %s name', $scopeI18n) ?>">
|
<input type="text" style="" placeholder="<?= sprintf('Freetext %s name', h($scopeI18n)) ?>">
|
||||||
<button
|
<button
|
||||||
class="btn"
|
class="btn"
|
||||||
type="button"
|
type="button"
|
||||||
title="<?= __('Move %s to the list of %s to block', $scopeI18n, Inflector::pluralize($scopeI18n));?>"
|
title="<?= __('Move %s to the list of %s to block', h($scopeI18n), Inflector::pluralize(h($scopeI18n)));?>"
|
||||||
aria-label="<?= __('Move %s to the list of %s to block', $scopeI18n, Inflector::pluralize($scopeI18n));?>"
|
aria-label="<?= __('Move %s to the list of %s to block', h($scopeI18n), Inflector::pluralize(h($scopeI18n)));?>"
|
||||||
role="button" tabindex="0"
|
role="button" tabindex="0"
|
||||||
onClick="<?= sprintf("handleFreetextButtonClick('%s', this); ", 'rules-block') ?>"
|
onClick="<?= sprintf("handleFreetextButtonClick('%s', this); ", 'rules-block') ?>"
|
||||||
>
|
>
|
||||||
|
@ -49,17 +49,17 @@ $seed = rand();
|
||||||
<button
|
<button
|
||||||
class="btn"
|
class="btn"
|
||||||
type="button"
|
type="button"
|
||||||
title="<?= __('Move %s to the list of %s to allow', $scopeI18n, Inflector::pluralize($scopeI18n));?>"
|
title="<?= __('Move %s to the list of %s to allow', h($scopeI18n), Inflector::pluralize(h($scopeI18n)));?>"
|
||||||
aria-label="<?= __('Move %s to the list of %s to allow', $scopeI18n, Inflector::pluralize($scopeI18n));?>"
|
aria-label="<?= __('Move %s to the list of %s to allow', h($scopeI18n), Inflector::pluralize(h($scopeI18n)));?>"
|
||||||
role="button" tabindex="0"
|
role="button" tabindex="0"
|
||||||
onClick="<?= sprintf("handlePickerButtonClick('%s', this); ", 'rules-allow') ?>"
|
onClick="<?= sprintf("handlePickerButtonClick('%s', this); ", 'rules-allow') ?>"
|
||||||
>
|
>
|
||||||
<i class="<?= $this->FontAwesome->getClass('caret-left') ?>"></i>
|
<i class="<?= $this->FontAwesome->getClass('caret-left') ?>"></i>
|
||||||
</button>
|
</button>
|
||||||
<select
|
<select
|
||||||
class="rules-select-picker rules-select-picker-<?= $scope ?>"
|
class="rules-select-picker rules-select-picker-<?= h($scope) ?>"
|
||||||
multiple
|
multiple
|
||||||
placeholder="<?= sprintf('%s name', $scopeI18n) ?>"
|
placeholder="<?= sprintf('%s name', h($scopeI18n)) ?>"
|
||||||
>
|
>
|
||||||
<?php foreach($options as $option): ?>
|
<?php foreach($options as $option): ?>
|
||||||
<?php if(is_array($option)): ?>
|
<?php if(is_array($option)): ?>
|
||||||
|
@ -72,8 +72,8 @@ $seed = rand();
|
||||||
<button
|
<button
|
||||||
class="btn"
|
class="btn"
|
||||||
type="button"
|
type="button"
|
||||||
title="<?= __('Move %s to the list of %s to block', $scopeI18n, Inflector::pluralize($scopeI18n));?>"
|
title="<?= __('Move %s to the list of %s to block', h($scopeI18n), Inflector::pluralize(h($scopeI18n)));?>"
|
||||||
aria-label="<?= __('Move %s to the list of %s to block', $scopeI18n, Inflector::pluralize($scopeI18n));?>"
|
aria-label="<?= __('Move %s to the list of %s to block', h($scopeI18n), Inflector::pluralize(h($scopeI18n)));?>"
|
||||||
role="button" tabindex="0"
|
role="button" tabindex="0"
|
||||||
onClick="<?= sprintf("handlePickerButtonClick('%s', this); ", 'rules-block') ?>"
|
onClick="<?= sprintf("handlePickerButtonClick('%s', this); ", 'rules-block') ?>"
|
||||||
>
|
>
|
||||||
|
@ -85,7 +85,7 @@ $seed = rand();
|
||||||
</div>
|
</div>
|
||||||
<div style="flex-grow: 1;">
|
<div style="flex-grow: 1;">
|
||||||
<div class="bold red" style="display: flex; align-items: center;">
|
<div class="bold red" style="display: flex; align-items: center;">
|
||||||
<?php echo __('Blocked %s (AND NOT)', Inflector::pluralize($scopeI18n));?>
|
<?php echo __('Blocked %s (AND NOT)', Inflector::pluralize(h($scopeI18n)));?>
|
||||||
<i
|
<i
|
||||||
class="useCursorPointer <?= $this->FontAwesome->getClass('trash') ?>"
|
class="useCursorPointer <?= $this->FontAwesome->getClass('trash') ?>"
|
||||||
style="margin-left: auto;"
|
style="margin-left: auto;"
|
||||||
|
@ -94,7 +94,7 @@ $seed = rand();
|
||||||
></i>
|
></i>
|
||||||
</div>
|
</div>
|
||||||
<select
|
<select
|
||||||
id="<?= sprintf('%s%sRightValues', Inflector::pluralize($scope), $technique) ?>"
|
id="<?= sprintf('%s%sRightValues', Inflector::pluralize(h($scope)), h($technique)) ?>"
|
||||||
size="6" multiple
|
size="6" multiple
|
||||||
style="margin-bottom: 0; width: 100%; overflow-x: auto;" class="rules-select-data rules-block"
|
style="margin-bottom: 0; width: 100%; overflow-x: auto;" class="rules-select-data rules-block"
|
||||||
></select>
|
></select>
|
||||||
|
|
Loading…
Reference in New Issue