fix: escape register query param

This commit is contained in:
Barış Soner Uşaklı
2020-01-19 22:03:18 -05:00
parent 8c6a7954cf
commit c8fb7f9246
2 changed files with 2 additions and 2 deletions

View File

@@ -398,7 +398,7 @@ app.cacheBuster = null;
}
if (registerMessage) {
$(document).ready(function () {
showAlert('register', decodeURIComponent(registerMessage));
showAlert('register', utils.escapeHTML(decodeURIComponent(registerMessage)));
registerMessage = false;
});
}

View File

@@ -361,7 +361,7 @@
var nodes = descendantTextNodes(element);
var text = nodes.map(function (node) {
return node.nodeValue;
return utils.escapeHTML(node.nodeValue);
}).join(' || ');
var attrNodes = attributes.reduce(function (prev, attr) {