Commit c0a06eec authored by Ozzie Isaacs's avatar Ozzie Isaacs

Removed xss on shelf add/remove action

parent 86ef1d47
...@@ -69,7 +69,7 @@ $("#archived_cb").on("change", function() { ...@@ -69,7 +69,7 @@ $("#archived_cb").on("change", function() {
templates.remove({ templates.remove({
add: this.href, add: this.href,
remove: $this.data("remove-href"), remove: $this.data("remove-href"),
content: this.textContent content: $("<div>").text(this.textContent).html()
}) })
); );
break; break;
...@@ -78,7 +78,7 @@ $("#archived_cb").on("change", function() { ...@@ -78,7 +78,7 @@ $("#archived_cb").on("change", function() {
templates.add({ templates.add({
add: $this.data("add-href"), add: $this.data("add-href"),
remove: this.href, remove: this.href,
content: this.textContent content: $("<div>").text(this.textContent).html(),
}) })
); );
break; break;
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment