Escape messages of notifications loaded by JavaScript

This commit is contained in:
Alexander A. Klimov 2016-02-19 14:10:58 +01:00
parent a493c3469c
commit 11ea7d99d7

View File

@ -711,7 +711,7 @@
c += ' persist'; c += ' persist';
} }
var $notice = $( var $notice = $(
'<li class="' + c + '">' + message + '</li>' '<li class="' + c + '">' + this.icinga.utils.escape(message) + '</li>'
).appendTo($('#notifications')); ).appendTo($('#notifications'));
this.icinga.ui.fixControls(); this.icinga.ui.fixControls();