Greg/SportAttendanceSheet
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: implement attendance tracking UI with guest management system

Browse Source
This commit is contained in:
Greg 2025-05-10 12:58:01 +02:00
parent e0a50ad020
commit f9a6255bc8
1 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
static/app.js
View File

@ -80,11 +80,12 @@ function renderTable() {
let value = e.target.value; let value = e.target.value;
// Only allow plain text, disallow HTML/script tags, max 50 chars // Only allow plain text, disallow HTML/script tags, max 50 chars
if (/</.test(value) || />/.test(value) || /["'`\\]/.test(value)) { if (/</.test(value) || />/.test(value) || /["'`\\]/.test(value)) {
alert('Guest name cannot contain code or special characters like <, >, ", \\', or backticks.'); alert("Guest name cannot contain code or special characters like <, >, \", \\\\, or backticks.");
guestNameInput.value = data.guestNames[date] || ''; guestNameInput.value = data.guestNames[date] || '';
return; return;
} }
if (!/^([\p{L}\p{N}\s\-\.]+)$/u.test(value)) { // Only allow a-z, A-Z, 0-9, spaces, hyphens, periods
if (!/^([a-zA-Z0-9 .-]+)$/.test(value)) {
alert('Guest name can only contain letters, numbers, spaces, hyphens, and periods.'); alert('Guest name can only contain letters, numbers, spaces, hyphens, and periods.');
guestNameInput.value = data.guestNames[date] || ''; guestNameInput.value = data.guestNames[date] || '';
return; return;