Discource-C/discourse
1
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2025-02-21 19:55:43 +00:00
Code Issues Packages Projects Releases Wiki Activity

FIX: strip html tags from category badge tooltips

Browse Source
This commit is contained in:
Neil Lalonde 2014-06-19 17:19:13 -04:00
parent cefdb98b79
commit eeeb834b6b
1 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
app/assets/javascripts/discourse/lib/html.js
View File

@ -95,8 +95,9 @@ Discourse.HTML = {
(opts.clearChildColor ? ' clear-badge' : '') + (opts.clearChildColor ? ' clear-badge' : '') +
extraClasses + "\" "; extraClasses + "\" ";
name = Handlebars.Utils.escapeExpression(name); name = Handlebars.Utils.escapeExpression(name);
// Add description if we have it
if (description) html += "title=\"" + Handlebars.Utils.escapeExpression(description) + "\" "; // Add description if we have it, without tags. Server has sanitized the description value.
if (description) html += "title=\"" + $("<div/>").html(description).text() + "\" ";
if (!opts.clearChildColor) { if (!opts.clearChildColor) {
var categoryStyle = Discourse.HTML.categoryStyle(category); var categoryStyle = Discourse.HTML.categoryStyle(category);