Bug 957826: XSS in the comment tag field

r=glob a=justdave

Bug 957826: XSS in the comment tag field
e117d6b8 · Frédéric Buclin · 2f7a7d31 · e117d6b8
Commit e117d6b8 authored Jan 09, 2014 by Frédéric Buclin
Hide whitespace changes
Inline Side-by-side

Showing with 1 addition and 1 deletion

comment-tagging.js js/comment-tagging.js +1 -1

No files found.
--- a/js/comment-tagging.js
+++ b/js/comment-tagging.js
@@ -197,7 +197,7 @@ YAHOO.bugzilla.commentTagging = {
                    YAHOO.util.Event.stopEvent(evt);
                }, tag);
                li.appendChild(document.createTextNode(' (' + this.nos_by_tag[tag].length + ')'));
-                a.innerHTML = tag;
+                a.innerHTML = YAHOO.lang.escapeHTML(tag);
            }
            while (container.hasChildNodes()) {
                container.removeChild(container.lastChild);