r5881 - add < and > escaping to the html escape method

Tue, 27 Oct 2009 03:58:04 -0700 

Author: damoxc

Revision: 5881

Log:
        add < and > escaping to the html escape method

Diff:
Modified: branches/1.2_RC/deluge/ui/web/js/Deluge.js
===================================================================
--- branches/1.2_RC/deluge/ui/web/js/Deluge.js  2009-10-27 10:34:07 UTC (rev 
5880)
+++ branches/1.2_RC/deluge/ui/web/js/Deluge.js  2009-10-27 10:57:47 UTC (rev 
5881)
@@ -50,7 +50,7 @@
     
     Ext.apply(Ext, {
        escapeHTML: function(text) {
-           text = String(text);
+           text = String(text).replace('<', '&lt;').replace('>', '&gt;');
            return text.replace('&', '&amp;');
        },
        

Modified: trunk/deluge/ui/web/js/Deluge.js
===================================================================
--- trunk/deluge/ui/web/js/Deluge.js    2009-10-27 10:34:07 UTC (rev 5880)
+++ trunk/deluge/ui/web/js/Deluge.js    2009-10-27 10:57:47 UTC (rev 5881)
@@ -50,7 +50,7 @@
     
     Ext.apply(Ext, {
        escapeHTML: function(text) {
-           text = String(text);
+           text = String(text).replace('<', '&lt;').replace('>', '&gt;');
            return text.replace('&', '&amp;');
        },
        



--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"deluge-commit" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to 
[email protected]
For more options, visit this group at 
http://groups.google.com/group/deluge-commit?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to