Escape HTML in JSON of calendar module

Fixes #2598
This commit is contained in:
Francis Lachapelle
2014-02-05 16:02:38 -05:00
parent f7a20d0a83
commit 1a7fc2a0e9
4 changed files with 23 additions and 10 deletions

View File

@@ -1783,7 +1783,7 @@ function newBaseEventDIV(eventRep, event, eventText) {
textDiv.addClassName("text");
var iconSpan = createElement("span", null, "icons");
textDiv.appendChild(iconSpan);
textDiv.appendChild(document.createTextNode(eventText.replace(/(\\r)?\\n/g, "<BR/>")));
textDiv.update(eventText.replace(/(\\r)?\\n/g, "<BR/>"));
// Add alarm and classification icons
if (event[9] == 1)