add < and > escaping to the html escape method

2009-10-27 10:57:47 +00:00 · 2009-10-27 10:57:47 +00:00 · 826f1a2be9
parent e17bd472a8
commit 826f1a2be9
1 changed files with 1 additions and 1 deletions
--- a/deluge/ui/web/js/Deluge.js
+++ b/deluge/ui/web/js/Deluge.js
@ -50,7 +50,7 @@ Ext.state.Manager.setProvider(new Ext.state.CookieProvider());
    
    Ext.apply(Ext, {
 	escapeHTML: function(text) {
-	    text = String(text);
+	    text = String(text).replace('<', '&lt;').replace('>', '&gt;');
 	    return text.replace('&', '&amp;');
 	},