From f8807ff7a8aa16d577789202d5c4620e9a958ebf Mon Sep 17 00:00:00 2001
From: Kevin Kaspari <kkasp@yelp.com>
Date: Fri, 16 Feb 2024 09:48:12 -0800
Subject: [PATCH] Use Underscores HTML escaped interpolation in template for
 log and command outputs

---
 tronweb/coffee/actionrun.coffee | 12 ++++++------
 tronweb/coffee/models.coffee    |  2 +-
 2 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/tronweb/coffee/actionrun.coffee b/tronweb/coffee/actionrun.coffee
index 7953dc16e..aa3cc8441 100644
--- a/tronweb/coffee/actionrun.coffee
+++ b/tronweb/coffee/actionrun.coffee
@@ -169,12 +169,12 @@ class module.ActionRunView extends Backbone.View
                     <tr><td>Node</td>
                         <td><%= displayNode(node) %></td></tr>
                     <tr><td>Raw original command</td>
-                        <td><code class="command"><%= original_command %></code></td></tr>
+                        <td><code class="command"><%- original_command %></code></td></tr>
                     <tr><td>Config command</td>
-                        <td><code class="command"><%= raw_command %></code></td></tr>
+                        <td><code class="command"><%- raw_command %></code></td></tr>
                     <% if (command) { %>
                     <tr><td>Last run command</td>
-                        <td><code class="command"><%= command %></code></td></tr>
+                        <td><code class="command"><%- command %></code></td></tr>
                     <% } %>
                     <tr><td>Exit codes</td>
                         <td>
@@ -211,15 +211,15 @@ class module.ActionRunView extends Backbone.View
             </div>
             <div class="span12 outline-block">
                 <h2>meta</h2>
-                <pre class="meta" style="display: none;"><%= meta.join('\\n') %></pre>
+                <pre class="meta" style="display: none;"><%- meta.join('\\n') %></pre>
             </div>
             <div class="span12 outline-block">
                 <h2>stdout</h2>
-                <pre class="stdout"><%= stdout.join('\\n') %></pre>
+                <pre class="stdout"><%- stdout.join('\\n') %></pre>
             </div>
             <div class="span12 outline-block">
                 <h2>stderr</h2>
-                <pre class="stderr"><%= stderr.join('\\n') %></pre>
+                <pre class="stderr"><%- stderr.join('\\n') %></pre>
             </div>
 
             <div id="action-run-history">
diff --git a/tronweb/coffee/models.coffee b/tronweb/coffee/models.coffee
index d6fc1f15a..3609e034c 100644
--- a/tronweb/coffee/models.coffee
+++ b/tronweb/coffee/models.coffee
@@ -34,7 +34,7 @@ class window.RefreshModel extends Backbone.Model
             @scheduleRefresh()
 
     disableRefresh: =>
-        console.log("Disableing refresh ")
+        console.log("Disabling refresh")
         @enabled = false
         @clear()