Fix xss vulnerability

2013-01-07 11:32:12 +02:00 · 2013-01-07 11:32:12 +02:00 · 676a9a7e28
parent 1665a06fdd
commit 676a9a7e28
1 changed files with 1 additions and 1 deletions
--- a/app/views/search/show.html.haml
+++ b/app/views/search/show.html.haml
@ -88,5 +88,5 @@
                  %h4.nothing_here_message No wiki pages
  :javascript
    $(function() {
-      $(".search_results .term").highlight("#{params[:search]}");
+      $(".search_results .term").highlight("#{escape_javascript(params[:search])}");
    })