Project

General

Profile

« Previous | Next » 

Revision 4979fb6a

Added by Stephen Beaver over 9 years ago

Escape HTML on re-saving separator text

View differences:

src/usr/local/www/firewall_rules.php
885 885

  
886 886
				sepinput = '<input type="hidden" name="separator[' + sepnum + '][row]" value="' + seprow + '"></input>';
887 887
				$('form').append(sepinput);
888
				sepinput = '<input type="hidden" name="separator[' + sepnum + '][text]" value="' + $(this).find('td').text() + '"></input>';
888
				sepinput = '<input type="hidden" name="separator[' + sepnum + '][text]" value="' + escapeHtml($(this).find('td').text()) + '"></input>';
889
				alert(sepinput);
889 890
				$('form').append(sepinput);
890 891
				sepinput = '<input type="hidden" name="separator[' + sepnum + '][color]" value="' + $(this).find('td').prop('class') + '"></input>';
891 892
				$('form').append(sepinput);

Also available in: Unified diff