From 11ea7d99d7b50af7edcfd47533efd95b855279da Mon Sep 17 00:00:00 2001
From: "Alexander A. Klimov" <alexander.klimov@netways.de>
Date: Fri, 19 Feb 2016 14:10:58 +0100
Subject: [PATCH] Escape messages of notifications loaded by JavaScript

---
 public/js/icinga/loader.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/public/js/icinga/loader.js b/public/js/icinga/loader.js
index fbbce393a..8a6bf7ffe 100644
--- a/public/js/icinga/loader.js
+++ b/public/js/icinga/loader.js
@@ -711,7 +711,7 @@
                 c += ' persist';
             }
             var $notice = $(
-                '<li class="' + c + '">' + message + '</li>'
+                '<li class="' + c + '">' + this.icinga.utils.escape(message) + '</li>'
             ).appendTo($('#notifications'));
 
             this.icinga.ui.fixControls();