Sanitize user input

This commit is contained in:
Lukas Reschke 2013-02-18 08:04:35 +01:00
parent 3b9796bfcc
commit a984a27fa0
1 changed files with 1 additions and 1 deletions

View File

@ -182,7 +182,7 @@ var UserList = {
var addGroup = function (select, group) { var addGroup = function (select, group) {
$('select[multiple]').each(function (index, element) { $('select[multiple]').each(function (index, element) {
if ($(element).find('option[value="' + group + '"]').length === 0 && select.data('msid') !== $(element).data('msid')) { if ($(element).find('option[value="' + group + '"]').length === 0 && select.data('msid') !== $(element).data('msid')) {
$(element).append('<option value="' + group + '">' + group + '</option>'); $(element).append('<option value="' + escapeHTML(group) + '">' + escapeHTML(group) + '</option>');
} }
}) })
}; };