tonyair/silverstripe-framework
1
0
Fork 0
mirror of https://github.com/silverstripe/silverstripe-framework synced 2024-10-22 12:05:37 +00:00
Code Issues Projects Releases Wiki Activity

BUGFIX Escape HTML in CMS status messages

Browse Source
This commit is contained in:
Ingo Schommer 2013-01-04 17:29:24 +01:00
parent 7bb0bbff0e
commit 604ede30a4
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
admin/javascript/LeftAndMain.js
View File

@ -963,6 +963,7 @@ jQuery.noConflict();
}(jQuery));
var statusMessage = function(text, type) {
text = $('<div/>').text(text).html(); // Escape HTML entities in text
jQuery.noticeAdd({text: text, type: type});
};