luci-base: escape path strings and field parameter
authorJo-Philipp Wich <jo@mein.io>
Sat, 7 Apr 2018 09:43:44 +0000 (11:43 +0200)
committerJo-Philipp Wich <jo@mein.io>
Sat, 7 Apr 2018 09:43:44 +0000 (11:43 +0200)
Prevent various XSS vectors by not interpolating field and path values
verbatim into script and html contexts.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>

No differences found