From 56eaf863f2593920161d5588c9ca63fe8e9312ce Mon Sep 17 00:00:00 2001
From: czaks <marcin@6irc.net>
Date: Thu, 27 Mar 2014 13:10:53 +0100
Subject: SECURITY: fix XSS vulnerability

---
 js/attention-bar.js | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

(limited to 'js')

diff --git a/js/attention-bar.js b/js/attention-bar.js
index a84cadff..40073081 100644
--- a/js/attention-bar.js
+++ b/js/attention-bar.js
@@ -2,7 +2,7 @@ $(document).ready(function(){
  $("#attention_bar").click(function(eO){ $("#attention_bar").css("display","none");
 	 $("#attention_bar_form").css("display","block"); });
  $.get(configRoot + "attentionbar.txt", function(data) {
-  $("#attention_bar").text(data);
-  $("#attention_bar_input").val(data);
+  $("#attention_bar").html(data);
+  $("#attention_bar_input").val($("#attention_bar").text());
  });
 });
-- 
cgit v1.3