summaryrefslogtreecommitdiff
path: root/program/js
diff options
context:
space:
mode:
authorAleksander Machniak <alec@alec.pl>2013-09-14 09:44:58 +0200
committerAleksander Machniak <alec@alec.pl>2013-09-14 09:44:58 +0200
commit2e30b24dbf3aebf4d201bc922eb7b7bc8ab8f4fd (patch)
treebf44474729b229e55a44d9977756a4b54878e90a /program/js
parent9ba0fb9631bf17a4e48249194114a0252ca18006 (diff)
Fix XSS issue in addressbook group name field [CVE-2013-5646] (#1489333)
Diffstat (limited to 'program/js')
-rw-r--r--program/js/app.js2
1 files changed, 1 insertions, 1 deletions
diff --git a/program/js/app.js b/program/js/app.js
index 42c661144..1d1c65172 100644
--- a/program/js/app.js
+++ b/program/js/app.js
@@ -4345,7 +4345,7 @@ function rcube_webmail()
boxtitle.append('&nbsp;&raquo;&nbsp;');
}
- boxtitle.append($('<span>'+prop.name+'</span>'));
+ boxtitle.append($('<span>').text(prop.name));
}
this.triggerEvent('groupupdate', prop);