diff --git a/app/views/wiki/edit.rhtml b/app/views/wiki/edit.rhtml index 42621a14..2c6f136c 100644 --- a/app/views/wiki/edit.rhtml +++ b/app/views/wiki/edit.rhtml @@ -46,7 +46,7 @@ function toggleVisibility() { var span = document.getElementById('title_change'); if (span.style.display =='inline') { span.style.display ='none'; - document.getElementById('new_name').value = "<%= @page.name %>"; + document.getElementById('new_name').value = "<%= escape_javascript(@page.name) %>"; var content = document.getElementById('content').value document.getElementById('content').value = content.replace(/\[\[!redirects <%= Regexp.escape(@page.name) %>\]\]\n/, '') } @@ -55,9 +55,9 @@ function toggleVisibility() { } function addRedirect(){ - if (document.getElementById('new_name').value != "<%= @page.name %>" ) { + if (document.getElementById('new_name').value != "<%= escape_javascript(@page.name) %>" ) { var content = document.getElementById('content'); - content.value = '[[!redirects <%= @page.name %>]]\n' + content.value + content.value = '[[!redirects <%= escape_javascript(@page.name) %>]]\n' + content.value } }