User input escapes
This commit is contained in:
parent
fe1a30027a
commit
b87e0781f6
|
@ -994,9 +994,9 @@ PublicServers.prototype.loadServers = function(dataset, search, clear) {
|
||||||
|
|
||||||
hits.forEach(function(hit) {
|
hits.forEach(function(hit) {
|
||||||
var source = hit._source;
|
var source = hit._source;
|
||||||
var icode = source.invite_code.replace(/ /g,'');
|
var icode = self.escape(source.invite_code.replace(/ /g,''));
|
||||||
var html = '<div class="server-row">';
|
var html = '<div class="server-row">';
|
||||||
html += '<div class="server-icon" style="background-image:url(' + source.icon + ')"></div>';
|
html += '<div class="server-icon" style="background-image:url(' + self.escape(source.icon) + ')"></div>';
|
||||||
html += '<div class="server-info server-name">';
|
html += '<div class="server-info server-name">';
|
||||||
html += '<div class="server-information">';
|
html += '<div class="server-information">';
|
||||||
|
|
||||||
|
@ -1008,7 +1008,7 @@ PublicServers.prototype.loadServers = function(dataset, search, clear) {
|
||||||
|
|
||||||
var tags = [];
|
var tags = [];
|
||||||
source.categories.forEach(function(tag) {
|
source.categories.forEach(function(tag) {
|
||||||
tags.push(tag.name);
|
tags.push(self.escape(tag.name));
|
||||||
});
|
});
|
||||||
|
|
||||||
var desc =
|
var desc =
|
||||||
|
|
File diff suppressed because one or more lines are too long
Loading…
Reference in New Issue