Send Dojo content via base64 encoding to workaround CVE

gyoshev · gyoshev · commit 6685e3d1697e · 2014-09-26T15:16:24.000+03:00
diff --git a/_assets/javascripts/dojo.js b/_assets/javascripts/dojo.js
@@ -11,7 +11,7 @@ var dojoApi = (function($) {
             }
             snippet = dojoApi.fixLineEndings(snippet);
             var form = $('<form method="post" target="_blank" action="' + dojoApi.configuration.url + '" />').appendTo(document.body);
-            $("<input name='snippet'>").val(snippet).appendTo(form);
+            $("<input name='snippet'>").val(window.btoa(snippet)).appendTo(form);
 
             form.submit();
         },

Original file line number	Diff line number	Diff line change
`@@ -11,7 +11,7 @@ var dojoApi = (function($) {`
`11`	`11`	`}`
`12`	`12`	`snippet = dojoApi.fixLineEndings(snippet);`
`13`	`13`	`var form = $('<form method="post" target="_blank" action="' + dojoApi.configuration.url + '" />').appendTo(document.body);`
`14`		`- $("<input name='snippet'>").val(snippet).appendTo(form);`
	`14`	`+ $("<input name='snippet'>").val(window.btoa(snippet)).appendTo(form);`
`15`	`15`
`16`	`16`	`form.submit();`
`17`	`17`	`},`