瀏覽代碼

Fix more reflective XSS issues

Jordi Boggiano 8 年之前
父節點
當前提交
dbcfd5cb41
共有 1 個文件被更改,包括 4 次插入0 次删除
  1. 4 0
      src/Packagist/WebBundle/Resources/public/js/search.js

+ 4 - 0
src/Packagist/WebBundle/Resources/public/js/search.js

@@ -6,6 +6,10 @@ document.getElementById('search_query_query').addEventListener('keydown', functi
 
 var searchParameters = {};
 
+if (decodeURI(location.search).match(/[<>]/)) {
+    location.replace(location.pathname);
+}
+
 if (algoliaConfig.tags) {
     searchParameters.disjunctiveFacets = ['tags'];
     searchParameters.disjunctiveFacetsRefinements = {