Merge branch 'main' into issueNo-OWASP-BLT#1351

JisanAR03 · Nov 4, 2023 · a9d8139 · a9d8139
2 parents 55a7e02 + 2b9cb44
commit a9d8139
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 6 deletions.
diff --git a/website/static/vendor/bootstrap/js/bootstrap.js b/website/static/vendor/bootstrap/js/bootstrap.js
@@ -1481,7 +1481,7 @@ function sanitizeInput(input) {
                 .addClass(placement)
                 .data('bs.' + this.type, this)
 
-            this.options.container ? $tip.appendTo(this.options.container) : $tip.insertAfter(this.$element)
+            this.options.container ? $tip.appendTo(sanitizeSelector(this.options.container)) : $tip.insertAfter(this.$element)
             this.$element.trigger('inserted.bs.' + this.type)
 
             var pos = this.getPosition()

diff --git a/website/views.py b/website/views.py
@@ -1989,7 +1989,10 @@ def get_score(request):
 
 
 def comment_on_issue(request, issue_pk):
-
+    try:
+        issue_pk = int(issue_pk)
+    except ValueError:
+        raise Http404("Issue does not exist")
     issue = Issue.objects.filter(pk=issue_pk).first()
 
     if request.method == "POST" and isinstance(request.user,User):
@@ -2008,10 +2011,7 @@ def comment_on_issue(request, issue_pk):
 
             if parent_comment == None:
                 messages.error(request,"Parent comment doesn't exist.")
-                if isinstance(issue_pk, int):  # Check if issue_pk is an integer
-                    return redirect(f"/issue2/{issue_pk}")
-                else:
-                    raise Http404("Issue does not exist")
+                return redirect(f"/issue2/{issue_pk}")
 
             Comment.objects.create(
                 parent = parent_comment,