Greg/SportAttendanceSheet
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Compare commits

base: Greg:f9a6255bc8b73c3426b5198c08e7b1e4f0017d4e
Branches Tags
Greg:main
Greg:feature/security
..
compare: Greg:0261350a1772481dee411f5cce3f9ec6f5f5afd1
Branches Tags
Greg:main
Greg:feature/security

No commits in common. "f9a6255bc8b73c3426b5198c08e7b1e4f0017d4e" and "0261350a1772481dee411f5cce3f9ec6f5f5afd1" have entirely different histories.
f9a6255bc8 ... 0261350a17

1 changed files with 1 additions and 26 deletions
Show Stats Expand all files Collapse all files

27
static/app.js
View File

@ -75,27 +75,8 @@ function renderTable() {
guestNameInput.type = 'text';
guestNameInput.value = data.guestNames[date] || '';
guestNameInput.placeholder = 'Enter guest name';
guestNameInput.maxLength = 50;
guestNameInput.onchange = e => {
let value = e.target.value;
// Only allow plain text, disallow HTML/script tags, max 50 chars
if (/</.test(value) || />/.test(value) || /["'`\\]/.test(value)) {
alert("Guest name cannot contain code or special characters like <, >, \", \\\\, or backticks.");
guestNameInput.value = data.guestNames[date] || '';
return;
}
// Only allow a-z, A-Z, 0-9, spaces, hyphens, periods
if (!/^([a-zA-Z0-9 .-]+)$/.test(value)) {
alert('Guest name can only contain letters, numbers, spaces, hyphens, and periods.');
guestNameInput.value = data.guestNames[date] || '';
return;
}
if (value.length > 50) {
alert('Guest name cannot be longer than 50 characters.');
guestNameInput.value = value.slice(0, 50);
value = value.slice(0, 50);
}
data.guestNames[date] = value;
data.guestNames[date] = e.target.value;
saveData();
};
guestNameTd.appendChild(guestNameInput);
@ -108,12 +89,6 @@ function renderTable() {
document.getElementById('add-date').onclick = function() {
const date = prompt('Enter date (DD/MM/YY):');
// Check format: DD/MM/YY
const dateRegex = /^\d{2}\/\d{2}\/\d{2}$/;
if (!dateRegex.test(date)) {
alert('Date must be in DD/MM/YY format.');
return;
}
if (date && !data.dates.includes(date)) {
data.dates.push(date);
saveData();