[AIRFLOW-6351] security - ui - Add Cross Site Scripting defence (#6913)

apache · Apr 14, 2020 · afa4b11 · afa4b11
1 parent 63260c9
commit afa4b11
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/airflow/www_rbac/views.py b/airflow/www_rbac/views.py
@@ -321,7 +321,7 @@ def get_int_arg(value, default=0):
             num_dag_to=min(end, num_of_all_dags),
             num_of_all_dags=num_of_all_dags,
             paging=wwwutils.generate_pages(current_page, num_of_pages,
-                                           search=arg_search_query,
+                                           search=escape(arg_search_query) if arg_search_query else None,
                                            showPaused=not hide_paused),
             num_runs=num_runs,
             tags=tags)