line / promgen

Promgen is a configuration file generator for Prometheus
https://line.github.io/promgen/
MIT License
1.06k stars 150 forks source link

templates: Add v-pre to protect against XSS #501

Closed vincent-olivert-riera closed 5 months ago

vincent-olivert-riera commented 5 months ago

When rendering the front end code with Jinja on the server side, the resulting rendered code may include Vue delimiters that will be interpreted by Vue on the client side.

To prevent that, we have added v-pre to some elements in those places where we think we can have issues.