Skip to content

Commit 95d8cba

Browse files
Konstantin Dinevgithub-advanced-security[bot]
andauthored
Fix code scanning alert no. 5: Incomplete string escaping or encoding
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
1 parent da1793f commit 95d8cba

File tree

1 file changed

+6
-4
lines changed

1 file changed

+6
-4
lines changed

src/js/modules/infragistics.templating.js

Lines changed: 6 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -186,8 +186,9 @@
186186
splitName = tempToken[ 1 ].split(".");
187187

188188
// K.D. September 25th, 2012 Bug #122463 The property can contain $ in its name.
189-
template = template.replace(new RegExp("\\$\\{" + tempToken[ 1 ].replace(/\$/g, "\\$") + "\\}", "g"), "");
190-
tempToken[ 3 ] = new RegExp("\\$\\{" + tempToken[ 1 ].replace(/\$/g, "\\$") + "\\}", "g");
189+
tempToken[ 1 ] = tempToken[ 1 ].replace(/\\/g, "\\\\").replace(/\$/g, "\\$");
190+
template = template.replace(new RegExp("\\$\\{" + tempToken[ 1 ] + "\\}", "g"), "");
191+
tempToken[ 3 ] = new RegExp("\\$\\{" + tempToken[ 1 ] + "\\}", "g");
191192
tempToken[ 1 ] = splitName;
192193
tempToken[ 2 ] = true;
193194
this.tokens.push(tempToken);
@@ -200,8 +201,9 @@
200201
splitName = tempToken[ 1 ].split(".");
201202

202203
// K.D. September 25th, 2012 Bug #122463 The property can contain $ in its name.
203-
template = template.replace(new RegExp("\\{\\{html\\s+" + tempToken[ 1 ].replace(/\$/g, "\\$") + "\\}\\}", "g"), "");
204-
tempToken[ 3 ] = new RegExp("\\{\\{html\\s+" + tempToken[ 1 ].replace(/\$/g, "\\$") + "\\}\\}", "g");
204+
tempToken[ 1 ] = tempToken[ 1 ].replace(/\\/g, "\\\\").replace(/\$/g, "\\$");
205+
template = template.replace(new RegExp("\\{\\{html\\s+" + tempToken[ 1 ] + "\\}\\}", "g"), "");
206+
tempToken[ 3 ] = new RegExp("\\{\\{html\\s+" + tempToken[ 1 ] + "\\}\\}", "g");
205207
tempToken[ 1 ] = splitName;
206208
tempToken[ 2 ] = false;
207209
this.tokens.push(tempToken);

0 commit comments

Comments
 (0)