RD WebDesign b8c35e230f Escape values and keys on Settings All page, to avoid possible stored XSS ...

Fix: https://github.com/pi-hole/web/security/advisories/GHSA-9rfm-c5g6-538p

Signed-off-by: RD WebDesign <github@rdwebdesign.com.br>

2026-03-19 19:38:35 -03:00

..

charts.js

Escape hostnames and IP addresses to avoid Stored XSS on network page and

2026-03-19 19:38:26 -03:00

footer.js

Do not try to compare component version when remote version info is not available (#3729)

2026-03-08 18:25:09 +01:00

gravity.js

Request ANSI colour codes when calling gravity API

2025-11-19 21:28:47 +00:00

groups-clients.js

utils: remove duplicate function and convert changeTableButtonStates to vanilla JS (#3547)

2025-07-11 18:34:12 +01:00

groups-common.js

utils: remove duplicate function and convert changeTableButtonStates to vanilla JS

2025-07-01 16:38:57 +03:00

groups-domains.js

utils: remove duplicate function and convert changeTableButtonStates to vanilla JS (#3547)

2025-07-11 18:34:12 +01:00

groups-lists.js

Fix addList function to include type in API request URL

2025-10-04 22:35:27 +01:00

groups.js

utils: remove duplicate function and convert changeTableButtonStates to vanilla JS

2025-07-01 16:38:57 +03:00

index.js

Improve line graph tooltip (#3601)

2025-10-04 08:58:29 +02:00

interfaces.js

interfaces: switch to vanilla JS and refactor code to reduce complexity/improve readability

2025-06-28 08:26:06 +03:00

ip-address-sorting.js

Update xo to v1.1.1

2025-06-27 21:19:40 +03:00

login.js

Abstract collapsing box to a new util

2025-06-21 08:49:23 +03:00

logout.js

Modernize JS and tighten things (#3388)

2025-04-24 18:17:04 +01:00

messages.js

Remove unused filter_dnsmasq_warnings=true option

2025-10-27 19:50:17 -03:00

network.js

Escape hostnames and IP addresses to avoid Stored XSS on network page and

2026-03-19 19:38:26 -03:00

queries.js

Use the properties earliest_timestamp and earliest_timestamp_disk provided by FTL (on related branch) to avoid having to call the (very heavy) GET /info/database endpoint just for sourcing the earliest timestamps in the database

2026-02-08 10:09:07 +01:00

search.js

xo: enable strict mode

2025-04-23 20:50:12 +03:00

settings-advanced.js

Escape values and keys on Settings All page, to avoid possible stored XSS

2026-03-19 19:38:35 -03:00

settings-api.js

Escape data.x_forwarded_for value before inserting it into the DOM

2026-01-09 17:56:12 -03:00

settings-dhcp.js

Fix deprecated ready function

2025-05-15 18:17:31 +03:00

settings-dns-records.js

Accidentally a ;

2026-02-15 17:55:55 +00:00

settings-dns.js

Abstract collapsing box to a new util

2025-06-21 08:49:23 +03:00

settings-privacy.js

Fix deprecated ready function

2025-05-15 18:17:31 +03:00

settings-system.js

Use /flush/network instead of /flush/arp

2025-06-30 13:47:11 +02:00

settings-teleporter.js

Use for...of in more places

2025-05-12 18:46:36 +03:00

settings.js

Use proper Object methods

2025-05-12 18:46:36 +03:00

taillog.js

Escape output on taillog.js to avoid Reflected XSS

2026-03-12 21:41:10 -03:00

utils.js

Remove unused filter_dnsmasq_warnings=true option

2025-10-27 19:50:17 -03:00