mirror of
https://github.com/NodeBB/NodeBB.git
synced 2025-10-26 16:46:12 +01:00
fix: escape register query param
This commit is contained in:
@@ -398,7 +398,7 @@ app.cacheBuster = null;
|
||||
}
|
||||
if (registerMessage) {
|
||||
$(document).ready(function () {
|
||||
showAlert('register', decodeURIComponent(registerMessage));
|
||||
showAlert('register', utils.escapeHTML(decodeURIComponent(registerMessage)));
|
||||
registerMessage = false;
|
||||
});
|
||||
}
|
||||
|
||||
@@ -361,7 +361,7 @@
|
||||
|
||||
var nodes = descendantTextNodes(element);
|
||||
var text = nodes.map(function (node) {
|
||||
return node.nodeValue;
|
||||
return utils.escapeHTML(node.nodeValue);
|
||||
}).join(' || ');
|
||||
|
||||
var attrNodes = attributes.reduce(function (prev, attr) {
|
||||
|
||||
Reference in New Issue
Block a user