[security] XSS injection patch

2016-09-26 01:41:08 +02:00 · 2016-09-26 01:41:08 +02:00 · 0529ec16d0
parent 2ddfea60cc
commit 0529ec16d0
1 changed files with 1 additions and 1 deletions
--- a/src/Gist/Resources/views/View/revisions.html.twig
+++ b/src/Gist/Resources/views/View/revisions.html.twig
@ -123,7 +123,7 @@
                    
                    var $pre = $('<pre>')
                        .attr('class', 'brush: diff; syntaxhighlighter')
-                        .html(diffContent);
+                        .text(diffContent);
                                    
                    $('#diff-' + (u + 1).toString()).append($pre);
                }