1
0
mirror of https://github.com/bitwarden/server.git synced 2024-11-24 12:35:25 +01:00

[AC-1637] Replaced Html.Raw with HttpUtility.HtmlDecode

This commit is contained in:
Rui Tome 2023-09-27 17:36:02 +01:00
parent 6bbc956337
commit d0500edd63
No known key found for this signature in database
GPG Key ID: 526239D96A8EC066
3 changed files with 9 additions and 6 deletions

View File

@ -1,8 +1,9 @@
@using Bit.Admin.Enums;
@using System.Web
@inject Bit.Admin.Services.IAccessControlService AccessControlService
@model OrganizationEditModel
@{
ViewData["Title"] = (Model.Provider != null ? "Client " : string.Empty) + "Organization: " + Html.Raw(Model.Name);
ViewData["Title"] = (Model.Provider != null ? "Client " : string.Empty) + "Organization: " + HttpUtility.HtmlDecode(Model.Name);
var canViewOrganizationInformation = AccessControlService.UserHasPermission(Permission.Org_OrgInformation_View);
var canViewBillingInformation = AccessControlService.UserHasPermission(Permission.Org_BillingInformation_View);
@ -55,7 +56,7 @@
</script>
}
<h1>@(Model.Provider != null ? "Client " : string.Empty)Organization <small>@Html.Raw(Model.Name)</small></h1>
<h1>@(Model.Provider != null ? "Client " : string.Empty)Organization <small>@HttpUtility.HtmlDecode(Model.Name)</small></h1>
@if (Model.Provider != null)
{

View File

@ -1,4 +1,5 @@
@model OrganizationsModel
@using System.Web
@model OrganizationsModel
@{
ViewData["Title"] = "Organizations";
}
@ -46,7 +47,7 @@
{
<tr>
<td>
<a asp-action="@Model.Action" asp-route-id="@org.Id">@Html.Raw(org.Name)</a>
<a asp-action="@Model.Action" asp-route-id="@org.Id">@HttpUtility.HtmlDecode(org.Name)</a>
</td>
<td>
@org.Plan

View File

@ -1,10 +1,11 @@
@inject Bit.Core.Settings.GlobalSettings GlobalSettings
@using System.Web
@model OrganizationViewModel
@{
ViewData["Title"] = "Organization: " + Html.Raw(Model.Organization.Name);
ViewData["Title"] = "Organization: " + HttpUtility.HtmlDecode(Model.Organization.Name);
}
<h1>Organization <small>@Html.Raw(Model.Organization.Name)</small></h1>
<h1>Organization <small>@HttpUtility.HtmlDecode(Model.Organization.Name)</small></h1>
@if (Model.Provider != null)
{