Commit 6c40dd1820b29d3a399e8d1a1e55146d289e93cc

Authored by Victor Costa
1 parent 1a36a52c

rails3: fix js escape on search menu

Showing 1 changed file with 3 additions and 3 deletions   Show diff stats
app/helpers/application_helper.rb
... ... @@ -1034,7 +1034,7 @@ module ApplicationHelper
1034 1034 end
1035 1035  
1036 1036 link_to(content_tag(:span, _('Contents'), :class => 'icon-menu-articles'), {:controller => "search", :action => 'contents', :category_path => nil}, :id => 'submenu-contents') +
1037   - link_to(content_tag(:span, _('Contents menu')), '#', :onclick => "toggleSubmenu(this,'',#{j links.to_json}); return false", :class => 'menu-submenu-trigger up', :id => 'submenu-contents-trigger')
  1037 + link_to(content_tag(:span, _('Contents menu')), '#', :onclick => "toggleSubmenu(this,'',#{CGI::escapeHTML(links.to_json)}); return false", :class => 'menu-submenu-trigger up', :id => 'submenu-contents-trigger')
1038 1038 end
1039 1039 alias :browse_contents_menu :search_contents_menu
1040 1040  
... ... @@ -1050,7 +1050,7 @@ module ApplicationHelper
1050 1050 end
1051 1051  
1052 1052 link_to(content_tag(:span, _('People'), :class => 'icon-menu-people'), {:controller => "search", :action => 'people', :category_path => ''}, :id => 'submenu-people') +
1053   - link_to(content_tag(:span, _('People menu')), '#', :onclick => "toggleSubmenu(this,'',#{j links.to_json}); return false", :class => 'menu-submenu-trigger up', :id => 'submenu-people-trigger')
  1053 + link_to(content_tag(:span, _('People menu')), '#', :onclick => "toggleSubmenu(this,'',#{CGI::escapeHTML(links.to_json)}); return false", :class => 'menu-submenu-trigger up', :id => 'submenu-people-trigger')
1054 1054 end
1055 1055 alias :browse_people_menu :search_people_menu
1056 1056  
... ... @@ -1066,7 +1066,7 @@ module ApplicationHelper
1066 1066 end
1067 1067  
1068 1068 link_to(content_tag(:span, _('Communities'), :class => 'icon-menu-community'), {:controller => "search", :action => 'communities'}, :id => 'submenu-communities') +
1069   - link_to(content_tag(:span, _('Communities menu')), '#', :onclick => "toggleSubmenu(this,'',#{j links.to_json}); return false", :class => 'menu-submenu-trigger up', :id => 'submenu-communities-trigger')
  1069 + link_to(content_tag(:span, _('Communities menu')), '#', :onclick => "toggleSubmenu(this,'',#{CGI::escapeHTML(links.to_json)}); return false", :class => 'menu-submenu-trigger up', :id => 'submenu-communities-trigger')
1070 1070 end
1071 1071 alias :browse_communities_menu :search_communities_menu
1072 1072  
... ...