Added escaping html code when building link to documentation.
This commit is contained in:
parent
52336b2038
commit
cf7afabf62
|
@ -18,7 +18,7 @@ $(document).ready(function(){
|
|||
version = oc_updateState.updateVersion,
|
||||
docLink = oc_updateState.updateLink,
|
||||
text = t('core', '{version} is available. Get more information on how to update.', {version: version}),
|
||||
element = $('<a href="'+docLink+'" target="_blank">'+text+'</a>');
|
||||
element = $('<a href="'+escapeHTML(docLink)+'" target="_blank">'+escapeHTML(text)+'</a>');
|
||||
|
||||
OC.Notification.showTemporary(
|
||||
element,
|
||||
|
|
Loading…
Reference in New Issue