mirror of
https://github.com/aljazceru/btcpayserver.git
synced 2026-02-01 12:24:24 +01:00
Sanitize UrlRoot in PayButton
This commit is contained in:
@@ -19,7 +19,7 @@
|
||||
<template id="template-get-scripts" csp-allow>
|
||||
if (!window.btcpay) {
|
||||
var script = document.createElement('script');
|
||||
script.src='@(Model.UrlRoot)modal/btcpay.js';
|
||||
script.src=@(Safe.Json(Model.UrlRoot + "modal/btcpay.js"));
|
||||
document.getElementsByTagName('head')[0].append(script);
|
||||
}
|
||||
function onBTCPayFormSubmit(event) {
|
||||
|
||||
Reference in New Issue
Block a user