Escape messages of notifications loaded by JavaScript

2025-07-30 09:14:08 +02:00 · 2016-02-19 14:10:58 +01:00 · 2016-02-19 14:10:58 +01:00 · 11ea7d99d7
commit 11ea7d99d7
parent a493c3469c
1 changed files with 1 additions and 1 deletions
--- a/public/js/icinga/loader.js
+++ b/public/js/icinga/loader.js
@ -711,7 +711,7 @@
                c += ' persist';
            }
            var $notice = $(
-                '<li class="' + c + '">' + message + '</li>'
+                '<li class="' + c + '">' + this.icinga.utils.escape(message) + '</li>'
            ).appendTo($('#notifications'));

            this.icinga.ui.fixControls();