修复xss的问题，使用a标签代替js跳转

2016-04-13 11:27:46 +08:00
parent 17131e8085
commit 20b51b70c3
2 changed files with 10 additions and 4 deletions
--- a/template/src/oj/problem/problem_list.html
+++ b/template/src/oj/problem/problem_list.html
@@ -77,10 +77,9 @@
                    </div>
                    <ul class="list-group">
                        {% for item in tags %}
-                            <li class="list-group-item problem-tag"
-                                onclick="location.href='/problems/?tag={{ item.name }}'">
-                                <span class="badge">{{ item.problem_number }}</span>
-                                {{ item.name }}
+                            <li class="list-group-item problem-tag">
+                            <a href="/problems/?tag={{ item.name }}">{{ item.name }}</a>
+                            <span class="badge">{{ item.problem_number }}</span>
                            </li>
                        {% endfor %}
                    </ul>