Wavyzz/dolibarr-fork
2
0
Fork 0
forked from Wavyzz/dolibarr
Code Pull Requests Activity

Fix: js not escaped

Browse Source
This commit is contained in:
Laurent Destailleur
2012-05-30 12:33:31 +02:00
parent 6d245e6f31
commit 705c152f7a
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
htdocs/core/class/html.form.class.php
View File

@@ -2251,8 +2251,8 @@ class Form
var choice=\'ko\';
var inputok='.json_encode($inputok).';
var inputko='.json_encode($inputko).';
var pageyes=\''.($pageyes?$pageyes:'').'\';
var pageno=\''.($pageno?$pageno:'').'\';
var pageyes=\''.dol_escape_js($pageyes?$pageyes:'').'\';
var pageno=\''.dol_escape_js($pageno?$pageno:'').'\';
/* Warning: This function is loaded once and not overwritten if loaded by another ajax page */
$(function() {