Escape usernames. Closes #2149.
This commit is contained in:
parent
7ac66a371e
commit
c5349c360f
1 changed files with 1 additions and 1 deletions
|
@ -2,7 +2,7 @@
|
|||
<% if !@user.home_lat.nil? and !@user.home_lon.nil? %>
|
||||
<% if !@user.nearby.empty? %>
|
||||
<% @user.nearby.each do |nearby| %>
|
||||
<% nearest_str += "nearest.push( { 'display_name' : '#{nearby.display_name}', 'home_lat' : #{nearby.home_lat}, 'home_lon' : #{nearby.home_lon} } );\n" %>
|
||||
<% nearest_str += "nearest.push( { 'display_name' : '#{escape_javascript(nearby.display_name)}', 'home_lat' : #{nearby.home_lat}, 'home_lon' : #{nearby.home_lon} } );\n" %>
|
||||
<% end %>
|
||||
<% end %>
|
||||
<% end %>
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue