IVYPORTAL-18029 High - Client-side cross-site scripting

- Try to fix Client-side cross-site scripting
axonivy-market · Dec 16, 2024 · c8474f3 · c8474f3
1 parent 6b4aa0a
commit c8474f3
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/AxonIvyPortal/portal/webContent/resources/js/iframe-task-template.js b/AxonIvyPortal/portal/webContent/resources/js/iframe-task-template.js
@@ -6,7 +6,7 @@ if (taskUrl){
   if(taskUrl.endsWith('blank')){
     window.history.back(document.referrer);
   }
-  getPortalIframe().src = taskUrl;
+  getPortalIframe().src = new URLSearchParams(window.location.search).get("taskUrl");
 }
 
 loadIframe(false);