remove query string XSS from login token

2020-05-16 23:05:45 -05:00
parent e3a2e8eee4
commit 5c1a977a87
2 changed files with 6 additions and 0 deletions
--- a/capsulflask/console.py
+++ b/capsulflask/console.py
@ -45,6 +45,8 @@ def double_check_capsul_address(id, ipv4):
 def index():
  vms = get_vms()
  created = request.args.get('created')
+  
+  # this is here to prevent xss
  if not re.match(r"^(cvm|capsul)-[a-z0-9]{10}$", created):
    created = '___________'