Sanitize any html stack traces

Author: niemyjski

src/components/simple-stack-trace/simple-stack-trace-directive.js

@@ -4,11 +4,11 @@
   angular.module('exceptionless.simple-stack-trace', [
     'exceptionless.simple-error'
   ])
-    .directive('simpleStackTrace', ['simpleErrorService', function (simpleErrorService) {
+    .directive('simpleStackTrace', ['$sanitize', 'simpleErrorService', function ($sanitize, simpleErrorService) {
       function buildStackFrames(exceptions) {
         var frames = '';
         for (var index = 0; index < exceptions.length; index++) {
-          frames += '<div class="stack-frame">' + exceptions[index].stack_trace.replace(' ', '');
+          frames += '<div class="stack-frame">' + $sanitize(exceptions[index].stack_trace.replace(' ', ''));
 
           if (index < (exceptions.length - 1)) {
             frames += '<div>--- End of inner exception stack trace ---</div>';
@@ -33,9 +33,9 @@
             header += ' ---> ';
           }
 
-          header += '<span class="ex-type">' + exceptions[index].type + '</span>';
+          header += '<span class="ex-type">' + $sanitize(exceptions[index].type) + '</span>';
           if (exceptions[index].message) {
-            header += '<span class="ex-message">: ' + exceptions[index].message + '</span>';
+            header += '<span class="ex-message">: ' + $sanitize(exceptions[index].message) + '</span>';
           }
 
           header += '</span>';

src/components/stack-trace/stack-trace-directive.js

@@ -4,7 +4,7 @@
   angular.module('exceptionless.stack-trace', [
     'exceptionless.error'
   ])
-  .directive('stackTrace', ['errorService', function (errorService) {
+  .directive('stackTrace', ['$sanitize', 'errorService', function ($sanitize, errorService) {
     function buildParameter(parameter) {
       var result = '';
 
@@ -71,7 +71,7 @@
         }
       }
 
-      return result + '\r\n';
+      return $sanitize(result + '\r\n');
     }
 
     function buildStackFrames(exceptions) {
@@ -112,9 +112,9 @@
           header += ' ---> ';
         }
 
-        header += '<span class="ex-type">' + exceptions[index].type + '</span>';
+        header += '<span class="ex-type">' + $sanitize(exceptions[index].type) + '</span>';
         if (exceptions[index].message) {
-          header += '<span class="ex-message">: ' + exceptions[index].message + '</span>';
+          header += '<span class="ex-message">: ' + $sanitize(exceptions[index].message) + '</span>';
         }
 
         header += '</span>';