Discource-C/discourse
1
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2025-02-18 01:05:00 +00:00
Code Issues Packages Projects Releases Wiki Activity

FIX: Title text should be correctly escaped since we are generating a raw html.

Browse Source
This commit is contained in:
Harry Seo 2013-12-18 12:18:59 +09:00
parent 39a360f6e3
commit dfc95d0f6f
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
app/assets/javascripts/discourse/helpers/application_helpers.js
View File

@ -289,7 +289,7 @@ Handlebars.registerHelper('number', function(property, options) {
var result = "<span class='" + classNames + "'";
if (n !== title) {
result += " title='" + title + "'";
result += " title='" + Handlebars.Utils.escapeExpression(title) + "'";
}
result += ">" + n + "</span>";