Sanitize UrlRoot in PayButton

This commit is contained in:
nicolas.dorier 2021-09-12 20:33:51 +09:00
parent aac87539ae
commit eccbe8e018
No known key found for this signature in database
GPG Key ID: 6618763EF09186FE

View File

@ -19,7 +19,7 @@
<template id="template-get-scripts" csp-allow>
if (!window.btcpay) {
var script = document.createElement('script');
script.src='@(Model.UrlRoot)modal/btcpay.js';
script.src=@(Safe.Json(Model.UrlRoot + "modal/btcpay.js"));
document.getElementsByTagName('head')[0].append(script);
}
function onBTCPayFormSubmit(event) {