fix: escape register query param

This commit is contained in:
Barış Soner Uşaklı
2020-01-19 22:03:18 -05:00
parent 8c6a7954cf
commit c8fb7f9246
2 changed files with 2 additions and 2 deletions

View File

@@ -398,7 +398,7 @@ app.cacheBuster = null;
} }
if (registerMessage) { if (registerMessage) {
$(document).ready(function () { $(document).ready(function () {
showAlert('register', decodeURIComponent(registerMessage)); showAlert('register', utils.escapeHTML(decodeURIComponent(registerMessage)));
registerMessage = false; registerMessage = false;
}); });
} }

View File

@@ -361,7 +361,7 @@
var nodes = descendantTextNodes(element); var nodes = descendantTextNodes(element);
var text = nodes.map(function (node) { var text = nodes.map(function (node) {
return node.nodeValue; return utils.escapeHTML(node.nodeValue);
}).join(' || '); }).join(' || ');
var attrNodes = attributes.reduce(function (prev, attr) { var attrNodes = attributes.reduce(function (prev, attr) {