update metrics page js to sanitize query parameter in metrics page URL

department-of-veterans-affairs · Nov 28, 2024 · 604bee6 · 604bee6
1 parent 4ccd27e
commit 604bee6
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/app/assets/javascripts/metrics_page.es6 b/app/assets/javascripts/metrics_page.es6
@@ -12,8 +12,9 @@ $(document).ready(function(){
             var pos1 = curUrl.lastIndexOf("?duration");
             curUrl = curUrl.substring(0, pos1);
         }
-        let duration = $( "#metrics_duration" ).val();
+        let duration = encodeURIComponent($("#metrics_duration").val());
         let newUrl = `${curUrl}?duration=${duration}`;
+        debugger
         window.location.href = newUrl;
     });