amorfo77/sogo
1
0
Fork 0
mirror of https://github.com/inverse-inc/sogo.git synced 2026-04-20 04:19:35 +00:00
Code Issues Projects Releases Wiki Activity

Escape HTML in CSS dialogs

Browse Source
This commit is contained in:
Francis Lachapelle
2014-02-07 16:12:14 -05:00
parent 3a5e44e7eb
commit c94595ea7f
2 changed files with 6 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
UI/WebServerResources/SchedulerUI.js
View File

@@ -265,7 +265,7 @@ function deleteEvent() {
content = nodes[i].allTextContent();
}
itemElement.appendChild(colorBox);
itemElement.appendChild(new Element('span').update(content));
itemElement.appendChild(new Element('span').update(content.escapeHTML()));
if (nodes[i].startDate) {
var startDate = new Date(nodes[i].startDate*1000);
var dateElement = new Element('div', {'class': 'muted'});
@@ -332,7 +332,7 @@ function deleteEvent() {
}
}
itemElement.appendChild(colorBox);
itemElement.appendChild(new Element('span').update(content));
itemElement.appendChild(new Element('span').update(content.escapeHTML()));
if (selectedCalendarCell[i].startDate) {
var startDate = new Date(selectedCalendarCell[i].startDate*1000);
var dateElement = new Element('div', {'class': 'muted'});

8
UI/WebServerResources/generic.js
View File

@@ -1467,7 +1467,7 @@ function showAlarmCallback(http) {
if (data["description"].length)
msg += "\n\n" + data["description"];
window.alert(msg);
window.alert(msg.unescapeHTML());
showSelectDialog(data["summary"], _('Snooze for '),
{ '5': _('5 minutes'),
'10': _('10 minutes'),
@@ -1983,7 +1983,7 @@ function createDialog(id, title, legend, content, positionClass) {
var subdiv = createElement("div", null, null, null, null, newDialog);
if (title && title.length > 0) {
var titleh3 = createElement("h3", null, null, null, null, subdiv);
titleh3.appendChild(document.createTextNode(title));
titleh3.update(title);
}
if (legend) {
if (Object.isElement(legend))
@@ -2141,14 +2141,14 @@ function _showSelectDialog(title, label, options, button, callbackFcn, callbackA
}
else {
var fields = createElement("p", null, []);
fields.appendChild(document.createTextNode(label));
fields.update(label);
var select = createElement("select"); //, null, null, { cname: name } );
fields.appendChild(select);
var values = $H(options).keys();
for (var i = 0; i < values.length; i++) {
var option = createElement("option", null, null,
{ value: values[i] }, null, select);
option.appendChild(document.createTextNode(options[values[i]]));
option.update(options[values[i]]);
}
fields.appendChild(createElement("br"));