Fixes possible XSS on all-file-types export

Signed-off-by: snipe <snipe@snipe.net>
snipe · Oct 15, 2021 · bda23bb · bda23bb
1 parent 5d94b99
commit bda23bb
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/resources/views/partials/bootstrap-table.blade.php b/resources/views/partials/bootstrap-table.blade.php
@@ -75,6 +75,10 @@ classes: 'table table-responsive table-no-bordered',
                 export: 'fa-download',
                 clearSearch: 'fa-times'
             },
+            exportOptions: {
+                htmlContent: true,
+            },
+
             exportTypes: ['csv', 'excel', 'doc', 'txt','json', 'xml', 'pdf'],
             onLoadSuccess: function () {
                 $('[data-toggle="tooltip"]').tooltip(); // Needed to attach tooltips after ajax call