Skip to content

bugzilla
bugzilla
Commit e117d6b8 authored by Frédéric Buclin's avatar Frédéric Buclin
Browse files
Options

Bug 957826: XSS in the comment tag field

r=glob a=justdave
parent 2f7a7d31
Hide whitespace changes
Inline Side-by-side
Showing with 1 addition and 1 deletion
js/comment-tagging.js
View file @ e117d6b8
...@@ -197,7 +197,7 @@ YAHOO.bugzilla.commentTagging = { ...@@ -197,7 +197,7 @@ YAHOO.bugzilla.commentTagging = {
YAHOO.util.Event.stopEvent(evt); YAHOO.util.Event.stopEvent(evt);
}, tag); }, tag);
li.appendChild(document.createTextNode(' (' + this.nos_by_tag[tag].length + ')')); li.appendChild(document.createTextNode(' (' + this.nos_by_tag[tag].length + ')'));
a.innerHTML = tag; a.innerHTML = YAHOO.lang.escapeHTML(tag);
} }
while (container.hasChildNodes()) { while (container.hasChildNodes()) {
container.removeChild(container.lastChild); container.removeChild(container.lastChild);
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment