From: Jo-Philipp Wich Date: Mon, 22 Jul 2019 15:18:32 +0000 (+0200) Subject: luci-base: ui.js: HTML escape uci changelog values X-Git-Url: http://git.lede-project.org./?a=commitdiff_plain;h=c67f052d91658363281299f44b26e2f9612476f9;p=project%2Fluci.git luci-base: ui.js: HTML escape uci changelog values Signed-off-by: Jo-Philipp Wich --- diff --git a/modules/luci-base/htdocs/luci-static/resources/ui.js b/modules/luci-base/htdocs/luci-static/resources/ui.js index e47e11b1cd..1a98dbcc9a 100644 --- a/modules/luci-base/htdocs/luci-static/resources/ui.js +++ b/modules/luci-base/htdocs/luci-static/resources/ui.js @@ -1797,7 +1797,7 @@ return L.Class.extend({ return chg[1]; case 4: - return "'" + chg[3].replace(/'/g, "'\"'\"'") + "'"; + return "'%h'".format(chg[3].replace(/'/g, "'\"'\"'")); default: return chg[m1-1];