Commit 6c40dd1820b29d3a399e8d1a1e55146d289e93cc
1 parent
1a36a52c
Exists in
master
and in
29 other branches
rails3: fix js escape on search menu
Showing
1 changed file
with
3 additions
and
3 deletions
Show diff stats
app/helpers/application_helper.rb
... | ... | @@ -1034,7 +1034,7 @@ module ApplicationHelper |
1034 | 1034 | end |
1035 | 1035 | |
1036 | 1036 | link_to(content_tag(:span, _('Contents'), :class => 'icon-menu-articles'), {:controller => "search", :action => 'contents', :category_path => nil}, :id => 'submenu-contents') + |
1037 | - link_to(content_tag(:span, _('Contents menu')), '#', :onclick => "toggleSubmenu(this,'',#{j links.to_json}); return false", :class => 'menu-submenu-trigger up', :id => 'submenu-contents-trigger') | |
1037 | + link_to(content_tag(:span, _('Contents menu')), '#', :onclick => "toggleSubmenu(this,'',#{CGI::escapeHTML(links.to_json)}); return false", :class => 'menu-submenu-trigger up', :id => 'submenu-contents-trigger') | |
1038 | 1038 | end |
1039 | 1039 | alias :browse_contents_menu :search_contents_menu |
1040 | 1040 | |
... | ... | @@ -1050,7 +1050,7 @@ module ApplicationHelper |
1050 | 1050 | end |
1051 | 1051 | |
1052 | 1052 | link_to(content_tag(:span, _('People'), :class => 'icon-menu-people'), {:controller => "search", :action => 'people', :category_path => ''}, :id => 'submenu-people') + |
1053 | - link_to(content_tag(:span, _('People menu')), '#', :onclick => "toggleSubmenu(this,'',#{j links.to_json}); return false", :class => 'menu-submenu-trigger up', :id => 'submenu-people-trigger') | |
1053 | + link_to(content_tag(:span, _('People menu')), '#', :onclick => "toggleSubmenu(this,'',#{CGI::escapeHTML(links.to_json)}); return false", :class => 'menu-submenu-trigger up', :id => 'submenu-people-trigger') | |
1054 | 1054 | end |
1055 | 1055 | alias :browse_people_menu :search_people_menu |
1056 | 1056 | |
... | ... | @@ -1066,7 +1066,7 @@ module ApplicationHelper |
1066 | 1066 | end |
1067 | 1067 | |
1068 | 1068 | link_to(content_tag(:span, _('Communities'), :class => 'icon-menu-community'), {:controller => "search", :action => 'communities'}, :id => 'submenu-communities') + |
1069 | - link_to(content_tag(:span, _('Communities menu')), '#', :onclick => "toggleSubmenu(this,'',#{j links.to_json}); return false", :class => 'menu-submenu-trigger up', :id => 'submenu-communities-trigger') | |
1069 | + link_to(content_tag(:span, _('Communities menu')), '#', :onclick => "toggleSubmenu(this,'',#{CGI::escapeHTML(links.to_json)}); return false", :class => 'menu-submenu-trigger up', :id => 'submenu-communities-trigger') | |
1070 | 1070 | end |
1071 | 1071 | alias :browse_communities_menu :search_communities_menu |
1072 | 1072 | ... | ... |