fix(beszel): escape backslashes before quotes in filter values
Fixes CodeQL warning: incomplete string escaping. Backslashes must be escaped first to prevent `\'` injection via `\` in user input.
This commit is contained in:
1 file changed
+1
-1
@@ -23,7 +23,7 @@ import type {
|
||||
UpdateAlertInput,
|
||||
} from "./beszel-types";
|
||||
|
||||
const escapeFilterValue = (value: string) => value.replace(/'/g, "\\'");
|
||||
const escapeFilterValue = (value: string) => value.replace(/\\/g, "\\\\").replace(/'/g, "\\'");
|
||||
|
||||
interface BeszelSession {
|
||||
token: string;
|
||||
|
||||
Reference in new issue
Block a user