User input escapes

This commit is contained in:
Jiiks 2016-08-15 02:00:09 +03:00
parent fe1a30027a
commit b87e0781f6
2 changed files with 5 additions and 5 deletions

View File

@ -994,9 +994,9 @@ PublicServers.prototype.loadServers = function(dataset, search, clear) {
hits.forEach(function(hit) {
var source = hit._source;
var icode = source.invite_code.replace(/ /g,'');
var icode = self.escape(source.invite_code.replace(/ /g,''));
var html = '<div class="server-row">';
html += '<div class="server-icon" style="background-image:url(' + source.icon + ')"></div>';
html += '<div class="server-icon" style="background-image:url(' + self.escape(source.icon) + ')"></div>';
html += '<div class="server-info server-name">';
html += '<div class="server-information">';
@ -1008,7 +1008,7 @@ PublicServers.prototype.loadServers = function(dataset, search, clear) {
var tags = [];
source.categories.forEach(function(tag) {
tags.push(tag.name);
tags.push(self.escape(tag.name));
});
var desc =

4
js/main.min.js vendored

File diff suppressed because one or more lines are too long