diff options
| author | Aleksander Machniak <alec@alec.pl> | 2013-09-14 09:44:58 +0200 |
|---|---|---|
| committer | Aleksander Machniak <alec@alec.pl> | 2013-09-14 09:44:58 +0200 |
| commit | 2e30b24dbf3aebf4d201bc922eb7b7bc8ab8f4fd (patch) | |
| tree | bf44474729b229e55a44d9977756a4b54878e90a /program/js | |
| parent | 9ba0fb9631bf17a4e48249194114a0252ca18006 (diff) | |
Fix XSS issue in addressbook group name field [CVE-2013-5646] (#1489333)
Diffstat (limited to 'program/js')
| -rw-r--r-- | program/js/app.js | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/program/js/app.js b/program/js/app.js index 42c661144..1d1c65172 100644 --- a/program/js/app.js +++ b/program/js/app.js @@ -4345,7 +4345,7 @@ function rcube_webmail() boxtitle.append(' » '); } - boxtitle.append($('<span>'+prop.name+'</span>')); + boxtitle.append($('<span>').text(prop.name)); } this.triggerEvent('groupupdate', prop); |