cristiancmoises
/
gophish
mirror of https://github.com/gophish/gophish
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Starting to fix some validation issues.

pull/233/head
Jordan Wright 2016-03-21 19:30:43 -05:00
parent 16b225b189
commit 9322d70fce
2 changed files with 18 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
static/js/app/campaign_results.js
View File

@ -136,8 +136,8 @@ function renderTimeline(data) {
"position": data[5]
}
results = '<div class="timeline col-sm-12 well well-lg">' +
'<h6>Timeline for ' + record.first_name + ' ' + record.last_name +
'</h6><span class="subtitle">Email: ' + record.email + '</span>' +
'<h6>Timeline for ' + escapeHtml(record.first_name) + ' ' + escapeHtml(record.last_name) +
'</h6><span class="subtitle">Email: ' + escapeHtml(record.email) + '</span>' +
'<div class="timeline-graph col-sm-6">'
$.each(campaign.timeline, function(i, event) {
if (!event.email || event.email == record.email) {
@ -147,7 +147,7 @@ function renderTimeline(data) {
results +=
' <div class="timeline-icon ' + statuses[event.message].label + '">' +
' <i class="fa ' + statuses[event.message].icon + '"></i></div>' +
' <div class="timeline-message">' + event.message +
' <div class="timeline-message">' + escapeHtml(event.message) +
' <span class="timeline-date">' + moment(event.time).format('MMMM Do YYYY h:mm') + '</span>'
if (event.details) {
results += '<div class="timeline-event-details"><i class="fa fa-caret-right"></i> View Details</div>'
@ -161,8 +161,8 @@ function renderTimeline(data) {
return true;
}
results += ' <tr>'
results += ' <td>' + param + '</td>'
results += ' <td>' + details.payload[param] + '</td>'
results += ' <td>' + escapeHtml(param) + '</td>'
results += ' <td>' + escapeHtml(details.payload[param]) + '</td>'
results += ' </tr>'
})
results += ' </tbody></table>'
@ -373,10 +373,10 @@ function load() {
resultsTable.row.add([
result.id,
"<i class=\"fa fa-caret-right\"></i>",
result.first_name || "",
result.last_name || "",
result.email || "",
result.position || "",
escapeHtml(result.first_name) || "",
escapeHtml(result.last_name) || "",
escapeHtml(result.email) || "",
escapeHtml(result.position) || "",
"<span class=\"label " + label + "\">" + result.status + "</span>"
]).draw()
if (!email_series_data[result.status]) {
@ -447,7 +447,7 @@ function load() {
cidx = $point.attr('meta')
html = "Event: " + campaign.timeline[cidx].message
if (campaign.timeline[cidx].email) {
html += '<br>' + "Email: " + campaign.timeline[cidx].email
html += '<br>' + "Email: " + escapeHtml(campaign.timeline[cidx].email)
}
$toolTip.html(html).show()
});

8
static/js/gophish.js
View File

@ -26,6 +26,14 @@ function query(endpoint, method, data, async) {
})
}
function escapeHtml(text){
return $("<div/>").text(text).html()
}
function unescapeHtml(html){
return $("<div/>").html(html).text()
}
/*
Define our API Endpoints
*/