update metrics page js to sanitize query parameter in metrics page URL

department-of-veterans-affairs · Nov 19, 2024 · a4e2c92 · a4e2c92
1 parent a686cbc
commit a4e2c92
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/app/assets/javascripts/metrics_page.es6 b/app/assets/javascripts/metrics_page.es6
@@ -12,8 +12,9 @@ $(document).ready(function(){
             var pos1 = curUrl.lastIndexOf("?duration");
             curUrl = curUrl.substring(0, pos1);
         }
-        let duration = $( "#metrics_duration" ).val();
+        let duration = encodeURIComponent($("#metrics_duration").val());
         let newUrl = `${curUrl}?duration=${duration}`;
+        debugger
         window.location.href = newUrl;
     });