YDA-5720 config publication terms

admin/static/admin/js/create_preview.js

@@ -1,11 +1,12 @@
 // Function to preview publication terms in a specific modal
 function createPreview() {
-    // Get the content of the textarea
+    // Get the content of the textarea and sanitize it
     var termsText = document.getElementById('publicationTerms').value;
+    const sanitizedContent = DOMPurify.sanitize(termsText);
 
     // Set the content in the modal body for preview
     const modalBody = document.querySelector('#confirmAgreementConditions .modal-body');
-    modalBody.innerHTML = termsText;
+    modalBody.innerHTML = sanitizedContent;
 
     // Show the modal
     var myModal = new bootstrap.Modal(document.getElementById('confirmAgreementConditions'));

admin/templates/admin/admin.html

@@ -4,6 +4,7 @@
 
 {% block scripts %}
 <script src="{{ url_for('admin_bp.static', filename='js/create_preview.js') }}"></script>
+<script src="{{ url_for('static', filename='js/purify.min.js') }}"></script>
 {% endblock scripts %}
 
 {% block content %}
@@ -25,7 +26,7 @@ <h2 class="card-title">Set Maintenance Banner</h2>
                         <div class="mb-3">
                             <label for="banner">Banner Details:</label>
                             <textarea class="form-control" name="banner" id="banner" rows="2"
-                                placeholder="Enter system maintenance details..." style="width: 110%;"
+                                placeholder="Enter system maintenance details..."
                                 required>{{config.get('banner').get('message','')}}</textarea>
                         </div>
                         <!-- Checkbox to mark the banner as important -->