Escape javascript in output
This commit is contained in:
parent
dde9038539
commit
ef9f53f861
1 changed files with 1 additions and 1 deletions
|
@ -2,6 +2,6 @@
|
|||
|
||||
<% else %>
|
||||
<% @bugs.each do |bug| %>
|
||||
putAJAXMarker(<%= bug.id.to_s %> , <%= bug.lon.to_s %> , <%= bug.lat.to_s %> , '<%= bug.flatten_comment("<hr />") %>', <%= (bug.status=="open"?"0":"1") %> );
|
||||
putAJAXMarker(<%= bug.id.to_s %> , <%= bug.lon.to_s %> , <%= bug.lat.to_s %> , '<%= escape_javascript(bug.flatten_comment("<hr />")) %>', <%= (bug.status=="open"?"0":"1") %> );
|
||||
<% end %>
|
||||
<% end %>
|
Loading…
Add table
Add a link
Reference in a new issue