Sanitize user input
This commit is contained in:
parent
3b9796bfcc
commit
a984a27fa0
|
@ -182,7 +182,7 @@ var UserList = {
|
|||
var addGroup = function (select, group) {
|
||||
$('select[multiple]').each(function (index, element) {
|
||||
if ($(element).find('option[value="' + group + '"]').length === 0 && select.data('msid') !== $(element).data('msid')) {
|
||||
$(element).append('<option value="' + group + '">' + group + '</option>');
|
||||
$(element).append('<option value="' + escapeHTML(group) + '">' + escapeHTML(group) + '</option>');
|
||||
}
|
||||
})
|
||||
};
|
||||
|
|
Loading…
Reference in New Issue