Skip to content

Commit 6c82d7e

Browse files
committed
add string escape to captcha confirm id and replace favicon
1 parent e9ade34 commit 6c82d7e

File tree

8 files changed

+10
-6
lines changed

8 files changed

+10
-6
lines changed

gateway/waf_captcha.go

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -8,6 +8,7 @@
88
package gateway
99

1010
import (
11+
"html"
1112
"net/http"
1213
"sync"
1314
"text/template"
@@ -32,7 +33,7 @@ const (
3233
// ShowCaptchaHandlerFunc ...
3334
func ShowCaptchaHandlerFunc(w http.ResponseWriter, r *http.Request) {
3435
go ClearExpiredCapthchaHitInfo()
35-
id := r.FormValue("id")
36+
id := html.EscapeString(r.FormValue("id"))
3637
captchaContext := models.CaptchaContext{CaptchaId: captcha.New(), ClientID: id}
3738
if err := formTemplate.Execute(w, &captchaContext); err != nil {
3839
http.Error(w, err.Error(), http.StatusInternalServerError)
1.58 KB
Binary file not shown.
-72 KB
Binary file not shown.
-965 Bytes
Loading

static/janusec-admin/favicon.ico

1.58 KB
Binary file not shown.

static/janusec-admin/index.html

Lines changed: 6 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,14 +1,17 @@
11
<!doctype html>
22
<html lang="en">
3+
34
<head><base href="/janusec-admin/">
45
<meta charset="utf-8">
5-
<title>JANUSEC</title>
6+
<title>Janusec Application Gateway</title>
67
<meta name="viewport" content="width=device-width, initial-scale=1">
78
<meta http-equiv="Content-Security-Policy" content="img-src 'self' data:;" />
89
<link href="/janusec-admin/assets/material-icons/material-icons.css" rel="stylesheet">
910
<link rel="icon" type="image/x-icon" href="favicon.ico">
1011
<link rel="stylesheet" href="/janusec-admin/styles.5b315bea3caf382abdf2.css"></head>
12+
1113
<body>
1214
<app-root></app-root>
13-
<script src="/janusec-admin/runtime-es2015.871528d607deca2f7955.js" type="module"></script><script src="/janusec-admin/runtime-es5.871528d607deca2f7955.js" nomodule defer></script><script src="/janusec-admin/polyfills-es5.aa2ca4297f425c58cd1c.js" nomodule defer></script><script src="/janusec-admin/polyfills-es2015.bf3b0982128d918baf6a.js" type="module"></script><script src="/janusec-admin/main-es2015.3d249a116c0e53e1af34.js" type="module"></script><script src="/janusec-admin/main-es5.3d249a116c0e53e1af34.js" nomodule defer></script></body>
14-
</html>
15+
<script src="/janusec-admin/runtime-es2015.871528d607deca2f7955.js" type="module"></script><script src="/janusec-admin/runtime-es5.871528d607deca2f7955.js" nomodule defer></script><script src="/janusec-admin/polyfills-es5.aa2ca4297f425c58cd1c.js" nomodule defer></script><script src="/janusec-admin/polyfills-es2015.bf3b0982128d918baf6a.js" type="module"></script><script src="/janusec-admin/main-es2015.9b510fd27c80e2436f66.js" type="module"></script><script src="/janusec-admin/main-es5.9b510fd27c80e2436f66.js" nomodule defer></script></body>
16+
17+
</html>

static/janusec-admin/main-es2015.3d249a116c0e53e1af34.js renamed to static/janusec-admin/main-es2015.9b510fd27c80e2436f66.js

Lines changed: 1 addition & 1 deletion
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

static/janusec-admin/main-es5.3d249a116c0e53e1af34.js renamed to static/janusec-admin/main-es5.9b510fd27c80e2436f66.js

Lines changed: 1 addition & 1 deletion
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)