scl/szurubooru
1
0
Fork 0
mirror of https://github.com/rr-/szurubooru.git synced 2025-07-17 08:26:24 +00:00
Code Issues Packages Projects Releases Wiki Activity

client/views: escape HTML

Browse Source 
This lets client use < > in tag names.
This commit is contained in:
rr-
2016-06-23 11:41:52 +02:00
parent b957f3ae36
commit 6ea129a9ef
29 changed files with 97 additions and 85 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
client/js/util/misc.js
View File

@ -224,6 +224,15 @@ function makeCssName(text, suffix) {
return suffix + '-' + text.replace(/[^a-z0-9]/g, '_');
}
function escapeHtml(unsafe) {
return unsafe
.replace(/&/g, '&amp;')
.replace(/</g, '&lt;')
.replace(/>/g, '&gt;')
.replace(/"/g, '&quot;')
.replace(/'/g, '&apos;');
}
module.exports = {
range: range,
formatSearchQuery: formatSearchQuery,
@ -236,5 +245,6 @@ module.exports = {
enableExitConfirmation: enableExitConfirmation,
disableExitConfirmation: disableExitConfirmation,
confirmPageExit: confirmPageExit,
escapeHtml: escapeHtml,
makeCssName: makeCssName,
};