Ville Vesilehto
939bb18c66
fix: add proper HTML escaping in renderFormField ...
Enhances template safety by escaping user-provided values before inserting
them into HTML output. Improves the function by consistently using escaped
variables throughout the implementation.
- Adds template.HTMLEscapeString for all dynamic values
- Updates variable naming for consistency (escapedName, idAttr, etc.)
- Adds tests to verify proper character escaping works as expected
Signed-off-by: Ville Vesilehto <ville@vesilehto.fi>
2025-03-26 15:38:28 +08:00
2023-07-31 23:00:02 +08:00
2025-01-12 15:08:34 +08:00
2024-04-06 16:46:23 +08:00
2024-04-12 20:16:44 +08:00
2024-07-31 21:44:47 +08:00
2020-12-14 11:12:00 +08:00
2025-03-15 21:52:43 +08:00
2020-12-14 12:34:55 +08:00
2023-05-27 14:41:51 +08:00
2021-06-07 19:03:40 +08:00
2021-09-03 11:40:13 +08:00
2023-07-31 23:00:02 +08:00
2021-11-29 21:29:29 +08:00
2023-07-31 23:00:02 +08:00
2021-08-02 00:01:48 +08:00
2023-07-31 23:00:02 +08:00
2024-03-31 21:25:11 +08:00
2023-07-31 23:00:02 +08:00
2023-07-31 23:00:02 +08:00
2020-10-08 18:29:36 +08:00
2023-07-31 23:00:02 +08:00
2021-09-03 11:40:13 +08:00
2020-12-14 11:12:00 +08:00
2023-07-31 23:00:02 +08:00
2021-01-03 22:00:47 +08:00
2020-12-14 12:34:55 +08:00
2021-06-07 19:03:40 +08:00
2021-09-03 11:40:13 +08:00
2020-12-13 23:09:19 +08:00
2020-10-08 18:29:36 +08:00
2021-11-29 21:29:29 +08:00
2023-07-31 23:00:02 +08:00
2021-06-07 19:03:40 +08:00
2024-07-24 17:06:24 +08:00
2025-01-01 10:25:23 +08:00
2021-08-04 21:47:47 +08:00
2023-07-31 23:00:02 +08:00
2023-07-31 23:00:02 +08:00
2023-07-31 23:00:02 +08:00
2020-10-08 18:29:36 +08:00
2021-09-03 11:40:13 +08:00
2021-06-07 19:03:40 +08:00
2023-07-31 23:00:02 +08:00
2025-03-26 15:38:28 +08:00
2025-03-26 15:38:28 +08:00
2022-05-29 07:54:48 +08:00
2022-05-29 07:54:48 +08:00
2023-05-27 14:41:51 +08:00
939bb18c66