Fix xss vulnerability

676a9a7e · Dmitriy Zaporozhets · 1665a06f · 676a9a7e
Commit 676a9a7e authored Jan 07, 2013 by Dmitriy Zaporozhets
Show whitespace changes
Inline Side-by-side

Showing with 1 addition and 1 deletion

app/views/search/show.html.haml app/views/search/show.html.haml +1 -1

No files found.
--- a/app/views/search/show.html.haml
+++ b/app/views/search/show.html.haml
@@ -88,5 +88,5 @@
                  %h4.nothing_here_message No wiki pages
  :javascript
    $(function() {
-      $(".search_results .term").highlight("#{params[:search]}");
+      $(".search_results .term").highlight("#{escape_javascript(params[:search])}");
    })