From faf8f9894a8377f551b06c64e09af272c0c33ffb Mon Sep 17 00:00:00 2001
From: Leo Q <LeoQuote@users.noreply.github.com>
Date: Mon, 9 Oct 2023 14:47:14 +0800
Subject: [PATCH] escape on js variables (#2318)

---
 sql/templates/detail.html | 17 +++++++++--------
 1 file changed, 9 insertions(+), 8 deletions(-)

diff --git a/sql/templates/detail.html b/sql/templates/detail.html
index 9aeed098d6..9fa999b4c7 100644
--- a/sql/templates/detail.html
+++ b/sql/templates/detail.html
@@ -407,6 +407,15 @@ <h4 class="modal-title text-danger">修改可执行时间</h4>
         });
     </script>
 
+    <script>
+        var editWorkflowNname = "{{ workflow_detail.workflow_name|escapejs }}";
+        var editDemandUrl = "{{ workflow_detail.demand_url|escapejs }}";
+        var editSqlContent = $("#editSqlContent").val();
+        var editGroup = "{{ workflow_detail.group_name|escapejs }}";
+        var editClustername = "{{ workflow_detail.instance.instance_name|escapejs }}";
+        var editDbname = "{{ workflow_detail.db_name|escapejs }}";
+        var editIsbackup = "{{ workflow_detail.is_backup|escapejs }}";
+    </script>
     <!--按钮控制 -->
     <script>
         // 表格展开折叠全部行
@@ -423,14 +432,6 @@ <h4 class="modal-title text-danger">修改可执行时间</h4>
             }
         });
 
-        var editWorkflowNname = "{{ workflow_detail.workflow_name }}";
-        var editDemandUrl = "{{ workflow_detail.demand_url }}";
-        var editSqlContent = $("#editSqlContent").val();
-        var editGroup = "{{ workflow_detail.group_name }}";
-        var editClustername = "{{ workflow_detail.instance.instance_name }}";
-        var editDbname = "{{ workflow_detail.db_name }}";
-        var editIsbackup = "{{ workflow_detail.is_backup }}";
-
         $("#btnEditSql").click(function () {
             sessionStorage.setItem('editWorkflowNname', editWorkflowNname);
             sessionStorage.setItem('editDemandUrl', editDemandUrl);