Skip to content
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.

Commit 67c5611

Browse files
committedNov 10, 2024
RANGER-4886: Html-unescaping for user, group and role name on policy items
1 parent 2a340fa commit 67c5611

File tree

1 file changed

+13
-7
lines changed

1 file changed

+13
-7
lines changed
 

‎security-admin/src/main/webapp/scripts/views/policies/RangerPolicyForm.js

+13-7
Original file line numberDiff line numberDiff line change
@@ -506,15 +506,21 @@ define(function(require){
506506
if(!_.isUndefined(m.get('groupName')) || !_.isUndefined(m.get("userName")) || !_.isUndefined(m.get('roleName'))){ //groupName or userName
507507
var RangerPolicyItem=Backbone.Model.extend()
508508
var policyItem = new RangerPolicyItem();
509-
if(!_.isUndefined(m.get('groupName')) && !_.isNull(m.get('groupName'))){
510-
policyItem.set("groups",m.get("groupName"));
509+
if (!_.isUndefined(m.get('groupName')) && !_.isNull(m.get('groupName'))) {
510+
policyItem.set("groups", m.get("groupName").map(function (m, i) {
511+
return _.unescape(m);
512+
}));
511513
}
512-
if(!_.isUndefined(m.get('userName')) && !_.isNull(m.get('userName'))){
513-
policyItem.set("users",m.get("userName"));
514+
if (!_.isUndefined(m.get('userName')) && !_.isNull(m.get('userName'))) {
515+
policyItem.set("users", m.get("userName").map(function (m, i) {
516+
return _.unescape(m);
517+
}));
518+
}
519+
if (!_.isUndefined(m.get('roleName')) && !_.isNull(m.get('roleName'))) {
520+
policyItem.set("roles", m.get("roleName").map(function (m, i) {
521+
return _.unescape(m);
522+
}));
514523
}
515-
if(!_.isUndefined(m.get('roleName')) && !_.isNull(m.get('roleName'))){
516-
policyItem.set("roles",m.get("roleName"));
517-
}
518524
if(!(_.isUndefined(m.get('conditions')) && _.isEmpty(m.get('conditions')))){
519525
var RangerPolicyItemConditionList = Backbone.Collection.extend();
520526
var rPolicyItemCondList = new RangerPolicyItemConditionList(m.get('conditions'))

0 commit comments

Comments
 (0)
Please sign in to comment.