Discource-C/discourse
1
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2025-02-18 01:05:00 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #1745 from ok-harry/master

Browse Source 
FIX: Title text should be correctly escaped since we are generating a raw html
This commit is contained in:
Régis Hanol 2013-12-23 05:48:42 -08:00
commit 30565dcd8f
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
app/assets/javascripts/discourse/helpers/application_helpers.js
View File

@ -289,7 +289,7 @@ Handlebars.registerHelper('number', function(property, options) {
var result = "<span class='" + classNames + "'";
if (n !== title) {
result += " title='" + title + "'";
result += " title='" + Handlebars.Utils.escapeExpression(title) + "'";
}
result += ">" + n + "</span>";