lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix: js not escaped

Browse Source
This commit is contained in:
Laurent Destailleur 2012-05-30 12:33:47 +02:00
parent fd9565934c
commit 92fe8ebe1d
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
htdocs/core/class/html.form.class.php
View File

@ -2262,9 +2262,9 @@ class Form
}); });
//alert(options); //alert(options);
} }
location.href=\''.$pageyes.'\' + options; location.href=\''.dol_escape_js($pageyes).'\' + options;
} }
'.($pageno?'if (choice == \'ko\') location.href=\''.$pageno.'\';':'').' '.($pageno?'if (choice == \'ko\') location.href=\''.dol_escape_js($pageno).'\';':'').'
}, },
buttons: { buttons: {
\''.dol_escape_js($langs->transnoentities("Yes")).'\': function() { \''.dol_escape_js($langs->transnoentities("Yes")).'\': function() {