Fixes possible XSS on all-file-types export

Signed-off-by: snipe <snipe@snipe.net>
2021-10-15 11:50:52 -05:00
parent 5d94b99035
commit bda23bb1e6
1 changed files with 4 additions and 0 deletions
--- a/resources/views/partials/bootstrap-table.blade.php
+++ b/resources/views/partials/bootstrap-table.blade.php
@@ -75,6 +75,10 @@
                export: 'fa-download',
                clearSearch: 'fa-times'
            },
+            exportOptions: {
+                htmlContent: true,
+            },
+
            exportTypes: ['csv', 'excel', 'doc', 'txt','json', 'xml', 'pdf'],
            onLoadSuccess: function () {
                $('[data-toggle="tooltip"]').tooltip(); // Needed to attach tooltips after ajax call