|
|
@@ -638,7 +638,7 @@ module.exports = function(crowi, app) {
|
|
|
actions.userGroup.create = function(req, res) {
|
|
|
const form = req.form.createGroupForm;
|
|
|
if (req.form.isValid) {
|
|
|
- const userGroupName = req.sanitize(form.userGroupName);
|
|
|
+ const userGroupName = crowi.xss.process(form.userGroupName);
|
|
|
|
|
|
UserGroup.createGroupByName(userGroupName)
|
|
|
.then((newUserGroup) => {
|
|
|
@@ -661,7 +661,7 @@ module.exports = function(crowi, app) {
|
|
|
actions.userGroup.update = function(req, res) {
|
|
|
|
|
|
const userGroupId = req.params.userGroupId;
|
|
|
- const name = req.sanitize(req.body.name);
|
|
|
+ const name = crowi.xss.process(req.body.name);
|
|
|
|
|
|
UserGroup.findById(userGroupId)
|
|
|
.then((userGroupData) => {
|