User input escapes
This commit is contained in:
parent
fe1a30027a
commit
b87e0781f6
|
@ -994,9 +994,9 @@ PublicServers.prototype.loadServers = function(dataset, search, clear) {
|
|||
|
||||
hits.forEach(function(hit) {
|
||||
var source = hit._source;
|
||||
var icode = source.invite_code.replace(/ /g,'');
|
||||
var icode = self.escape(source.invite_code.replace(/ /g,''));
|
||||
var html = '<div class="server-row">';
|
||||
html += '<div class="server-icon" style="background-image:url(' + source.icon + ')"></div>';
|
||||
html += '<div class="server-icon" style="background-image:url(' + self.escape(source.icon) + ')"></div>';
|
||||
html += '<div class="server-info server-name">';
|
||||
html += '<div class="server-information">';
|
||||
|
||||
|
@ -1008,7 +1008,7 @@ PublicServers.prototype.loadServers = function(dataset, search, clear) {
|
|||
|
||||
var tags = [];
|
||||
source.categories.forEach(function(tag) {
|
||||
tags.push(tag.name);
|
||||
tags.push(self.escape(tag.name));
|
||||
});
|
||||
|
||||
var desc =
|
||||
|
|
File diff suppressed because one or more lines are too long
Loading…
Reference in New Issue