escaping of dangerous characters to prevent reflected xss

2021-01-17 17:56:43 +01:00 · 2021-01-17 17:56:43 +01:00 · 2dd067170b
parent e635ca86c5
commit 2dd067170b
1 changed files with 2 additions and 1 deletions
--- a/server/src/main/resources/web/fileNotSupported.ftl
+++ b/server/src/main/resources/web/fileNotSupported.ftl
@ -32,7 +32,8 @@
 <div class="container">
    <img src="images/sorry.jpg" />
    <span>
-        该文件类型(${file.suffix})系统暂时不支持在线预览，<b>说明</b>：
+    该文件类型(${file.suffix?html})系统暂时不支持在线预览，<b>说明</b>：      
+    
        <p style="color: red;">${msg}</p>
        有任何疑问，请加&nbsp;<a href="https://jq.qq.com/?_wv=1027&k=5c0UAtu">官方QQ群：613025121</a>&nbsp;咨询
    </span>