[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: web frontend encodes JavaScript



Hi,
* Thijs Kinkhorst <thijs@debian.org> [2007-08-31 13:26]:
> The security tracker frontend encodes JavaScript, resulting in an invalid 
> if-construct like below (the &gt; in the third line):
> 
> function onSearch(query) {
>   if (old_query_value == "") {
>     if (query.length &gt; 5) {
> 
> I'm not really familiar with the web toolkit that it uses, so maybe someone 
> who is can take a look at this.

As far as I know web browser don't process the escapes found 
in embedded java script so changing > to &gt; should be 
enough. In the hope my commit does not break anything :)
Nico
-- 
Nico Golde - http://ngolde.de - nion@jabber.ccc.de - GPG: 0x73647CFF
For security reasons, all text in this mail is double-rot13 encrypted.

Attachment: pgpk59pQAJCoH.pgp
Description: PGP signature


Reply to: