deac/gitlabhq
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

Fix xss vulnerability

Browse source
This commit is contained in:
Dmitriy Zaporozhets 2013-01-07 11:32:12 +02:00
parent 1665a06fdd
commit 676a9a7e28
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
app/views/search/show.html.haml
View file

@ -88,5 +88,5 @@
%h4.nothing_here_message No wiki pages
:javascript
$(function() {
$(".search_results .term").highlight("#{params[:search]}");
$(".search_results .term").highlight("#{escape_javascript(params[:search])}");
})