Discource-C
/
discourse
mirror of https://github.com/discourse/discourse.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

FIX: escape topic status' title

This commit is contained in:
Régis Hanol 2014-11-05 12:09:22 +01:00
parent 73a1d168e3
commit 568033f623
1 changed files with 2 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
app/assets/javascripts/discourse/components/topic-status.js.es6
View File

@ -40,13 +40,11 @@ export default Ember.Component.extend({
var renderIconIf = function(conditionProp, name, key, actionable) { var renderIconIf = function(conditionProp, name, key, actionable) {
if (!self.get(conditionProp)) { return; } if (!self.get(conditionProp)) { return; }
var title = I18n.t("topic_statuses." + key + ".help"); var title = Handlebars.Utils.escapeExpression(I18n.t("topic_statuses." + key + ".help"));
var startTag = actionable ? "a href='#'" : "span"; var startTag = actionable ? "a href='#'" : "span";
var endTag = actionable ? "a" : "span"; var endTag = actionable ? "a" : "span";
buffer.push("<" + startTag + buffer.push("<" + startTag + " title='" + title + "' class='topic-status'><i class='fa fa-" + name + "'></i></" + endTag + ">");
" title='" + title +"' class='topic-status'><i class='fa fa-" + name + "'></i></" + endTag + ">");
}; };
// Allow a plugin to add a custom icon to a topic // Allow a plugin to add a custom icon to a topic