sysops c7df129fdd Escape server name before HTML interpolation in servers.html ...

obj.name is free text (unlike id/interface, which are already
regex-validated server-side) and was being template-literal'd
straight into innerHTML - stored-XSS risk if a server name contains
markup. Escape via jQuery .text()/.html() round-trip.

2026-07-11 23:24:45 +02:00

..

about.html

Replace from-scratch rewrite with real ngoduykhanh/wireguard-ui fork

2026-07-10 18:34:44 +02:00

base.html

Add server creation UI + user-server access assignment (step 3)

2026-07-11 23:24:05 +02:00

clients.html

Replace from-scratch rewrite with real ngoduykhanh/wireguard-ui fork

2026-07-10 18:34:44 +02:00

global_settings.html

Replace from-scratch rewrite with real ngoduykhanh/wireguard-ui fork

2026-07-10 18:34:44 +02:00

login.html

Replace from-scratch rewrite with real ngoduykhanh/wireguard-ui fork

2026-07-10 18:34:44 +02:00

profile.html

Replace from-scratch rewrite with real ngoduykhanh/wireguard-ui fork

2026-07-10 18:34:44 +02:00

server.html

Replace from-scratch rewrite with real ngoduykhanh/wireguard-ui fork

2026-07-10 18:34:44 +02:00

servers.html

Escape server name before HTML interpolation in servers.html

2026-07-11 23:24:45 +02:00

status.html

Replace from-scratch rewrite with real ngoduykhanh/wireguard-ui fork

2026-07-10 18:34:44 +02:00

users_settings.html

Add server creation UI + user-server access assignment (step 3)

2026-07-11 23:24:05 +02:00

wake_on_lan_hosts.html

Replace from-scratch rewrite with real ngoduykhanh/wireguard-ui fork

2026-07-10 18:34:44 +02:00

wg.conf

Replace from-scratch rewrite with real ngoduykhanh/wireguard-ui fork

2026-07-10 18:34:44 +02:00