diff options
| author | czaks <marcin@6irc.net> | 2014-03-27 13:10:53 +0100 |
|---|---|---|
| committer | czaks <marcin@6irc.net> | 2014-03-27 13:10:53 +0100 |
| commit | 56eaf863f2593920161d5588c9ca63fe8e9312ce (patch) | |
| tree | 4b7873b096b275ef4477ff042397db4e9b18fb09 /js/attention-bar.js | |
| parent | ba6744a1c6f5cf13f43b132509d4b55fdff30e99 (diff) | |
SECURITY: fix XSS vulnerability
Diffstat (limited to 'js/attention-bar.js')
| -rw-r--r-- | js/attention-bar.js | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/js/attention-bar.js b/js/attention-bar.js index a84cadff..40073081 100644 --- a/js/attention-bar.js +++ b/js/attention-bar.js @@ -2,7 +2,7 @@ $(document).ready(function(){ $("#attention_bar").click(function(eO){ $("#attention_bar").css("display","none"); $("#attention_bar_form").css("display","block"); }); $.get(configRoot + "attentionbar.txt", function(data) { - $("#attention_bar").text(data); - $("#attention_bar_input").val(data); + $("#attention_bar").html(data); + $("#attention_bar_input").val($("#attention_bar").text()); }); }); |