Merge pull request swagger-api#1867 from joevennix/fix-content-type-xss

Fix issue swagger-api#1866, XSS in content types from schema.
roboconf · Jan 13, 2016 · 607e195 · 607e195
2 parents ce81991 + cbe7a14
commit 607e195
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 3 deletions.
diff --git a/src/main/template/content_type.handlebars b/src/main/template/content_type.handlebars
@@ -2,7 +2,7 @@
 <select name="contentType" id="{{contentTypeId}}">
 {{#if produces}}
   {{#each produces}}
-	<option value="{{this}}">{{{this}}}</option>
+	<option value="{{this}}">{{this}}</option>
 	{{/each}}
 {{else}}
   <option value="application/json">application/json</option>

diff --git a/src/main/template/parameter_content_type.handlebars b/src/main/template/parameter_content_type.handlebars
@@ -2,7 +2,7 @@
 <select name="parameterContentType" id="{{parameterContentTypeId}}">
 {{#if consumes}}
   {{#each consumes}}
-  <option value="{{this}}">{{{this}}}</option>
+  <option value="{{this}}">{{this}}</option>
   {{/each}}
 {{else}}
   <option value="application/json">application/json</option>

diff --git a/src/main/template/response_content_type.handlebars b/src/main/template/response_content_type.handlebars
@@ -2,7 +2,7 @@
 <select name="responseContentType" id="{{responseContentTypeId}}">
 {{#if produces}}
   {{#each produces}}
-  <option value="{{this}}">{{{this}}}</option>
+  <option value="{{this}}">{{this}}</option>
   {{/each}}
 {{else}}
   <option value="application/json">application/json</option>