darkhelm/notifications-admin
1
0
Fork 0
mirror of https://github.com/GSA/notifications-admin.git synced 2026-08-21 14:59:47 -04:00
Code Issues Packages Projects Releases Wiki Activity

adding escaping

Browse Source
This commit is contained in:
Beverly Nguyen
2025-11-05 15:27:05 -08:00
committed by Alex Janousek
parent bdc6db1d66
commit 981216689a
1 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
app/main/views/organizations.py
View File

@@ -14,6 +14,7 @@ from flask import (
url_for, url_for,
) )
from flask_login import current_user from flask_login import current_user
from markupsafe import escape
from app import current_organization, org_invite_api_client, organizations_client from app import current_organization, org_invite_api_client, organizations_client
from app.enums import OrganizationType from app.enums import OrganizationType
@@ -171,12 +172,12 @@ def _handle_edit_service(org_id, service_id):
return { return {
"id": service.id, "id": service.id,
"name": ( "name": (
request.form.get("service_name", "").strip() escape(request.form.get("service_name", "").strip())
if request.method == "POST" if request.method == "POST"
else service.name else service.name
), ),
"primary_contact": ( "primary_contact": (
request.form.get("primary_contact", "").strip() escape(request.form.get("primary_contact", "").strip())
if request.method == "POST" if request.method == "POST"
else (service.billing_contact_email_addresses or "") else (service.billing_contact_email_addresses or "")
), ),