RD WebDesign 4f5bdd1fae Escape output on Queries page, to avoid Stored HTML Injection ...

Fix: https://github.com/pi-hole/web/security/advisories/GHSA-jx8x-mj2r-62vq

Signed-off-by: RD WebDesign <github@rdwebdesign.com.br>

2026-03-19 19:38:36 -03:00

..

charts.js

Escape hostnames and IP addresses to avoid Stored XSS on network page and

2026-03-19 19:38:26 -03:00

footer.js

Do not try to compare component version when remote version info is not available (#3729)

2026-03-08 18:25:09 +01:00

gravity.js

Request ANSI colour codes when calling gravity API

2025-11-19 21:28:47 +00:00

groups-clients.js

…

groups-common.js

…

groups-domains.js

…

groups-lists.js

Fix addList function to include type in API request URL

2025-10-04 22:35:27 +01:00

groups.js

…

index.js

…

interfaces.js

…

ip-address-sorting.js

…

login.js

…

logout.js

…

messages.js

Remove unused filter_dnsmasq_warnings=true option

2025-10-27 19:50:17 -03:00

network.js

Escape hostnames and IP addresses to avoid Stored XSS on network page and

2026-03-19 19:38:26 -03:00

queries.js

Escape output on Queries page, to avoid Stored HTML Injection

2026-03-19 19:38:36 -03:00

search.js

…

settings-advanced.js

Escape values and keys on Settings All page, to avoid possible stored XSS

2026-03-19 19:38:35 -03:00

settings-api.js

Escape data.x_forwarded_for value before inserting it into the DOM

2026-01-09 17:56:12 -03:00

settings-dhcp.js

…

settings-dns-records.js

Accidentally a ;

2026-02-15 17:55:55 +00:00

settings-dns.js

…

settings-privacy.js

…

settings-system.js

…

settings-teleporter.js

…

settings.js

…

taillog.js

Escape output on taillog.js to avoid Reflected XSS

2026-03-12 21:41:10 -03:00

utils.js

Remove unused filter_dnsmasq_warnings=true option

2025-10-27 19:50:17 -03:00