From 11ea7d99d7b50af7edcfd47533efd95b855279da Mon Sep 17 00:00:00 2001 From: "Alexander A. Klimov" Date: Fri, 19 Feb 2016 14:10:58 +0100 Subject: [PATCH] Escape messages of notifications loaded by JavaScript --- public/js/icinga/loader.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/public/js/icinga/loader.js b/public/js/icinga/loader.js index fbbce393a..8a6bf7ffe 100644 --- a/public/js/icinga/loader.js +++ b/public/js/icinga/loader.js @@ -711,7 +711,7 @@ c += ' persist'; } var $notice = $( - '
  • ' + message + '
  • ' + '
  • ' + this.icinga.utils.escape(message) + '
  • ' ).appendTo($('#notifications')); this.icinga.ui.fixControls();