darkhelm/notifications-admin
1
0
Fork 0
mirror of https://github.com/GSA/notifications-admin.git synced 2025-12-10 15:13:40 -05:00
Code Issues Packages Projects Releases Wiki Activity

adding escaping

Browse Source
This commit is contained in:
Beverly Nguyen
2025-11-05 15:27:05 -08:00
committed by Alex Janousek
parent bdc6db1d66
commit 981216689a
1 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
app/main/views/organizations.py
View File

@@ -14,6 +14,7 @@ from flask import (
url_for,
)
from flask_login import current_user
from markupsafe import escape
from app import current_organization, org_invite_api_client, organizations_client
from app.enums import OrganizationType
@@ -171,12 +172,12 @@ def _handle_edit_service(org_id, service_id):
return {
"id": service.id,
"name": (
request.form.get("service_name", "").strip()
escape(request.form.get("service_name", "").strip())
if request.method == "POST"
else service.name
),
"primary_contact": (
request.form.get("primary_contact", "").strip()
escape(request.form.get("primary_contact", "").strip())
if request.method == "POST"
else (service.billing_contact_email_addresses or "")
),