##// END OF EJS Templates
pull-requests: fixed some xss problems with odd filenames.
milka -
r4652:9012cc2f default
parent child Browse files
Show More
@@ -1331,7 +1331,7 b' var CommentsController = function() {'
1331
1331
1332 // There aren't any comments, we init the `.inline-comments` with `reply-thread-container` first
1332 // There aren't any comments, we init the `.inline-comments` with `reply-thread-container` first
1333 if ($comments.length===0) {
1333 if ($comments.length===0) {
1334 var replBtn = '<button class="cb-comment-add-button" onclick="return Rhodecode.comments.createComment(this, \'{0}\', \'{1}\', null)">Reply...</button>'.format(f_path, line_no)
1334 var replBtn = '<button class="cb-comment-add-button" onclick="return Rhodecode.comments.createComment(this, \'{0}\', \'{1}\', null)">Reply...</button>'.format(escapeHtml(f_path), line_no)
1335 var $reply_container = $('#cb-comments-inline-container-template')
1335 var $reply_container = $('#cb-comments-inline-container-template')
1336 $reply_container.find('button.cb-comment-add-button').replaceWith(replBtn);
1336 $reply_container.find('button.cb-comment-add-button').replaceWith(replBtn);
1337 $td.append($($reply_container).html());
1337 $td.append($($reply_container).html());
@@ -221,7 +221,7 b' if (show_disabled) {'
221 <%= version_info %>
221 <%= version_info %>
222 <% } %>
222 <% } %>
223 <br/>
223 <br/>
224 File: <code><%- file_name -%></code>
224 File: <code><%= file_name -%></code>
225 <% } else { %>
225 <% } else { %>
226 <% if (review_status) { %>
226 <% if (review_status) { %>
227 <i class="icon-circle review-status-<%= review_status %>"></i>
227 <i class="icon-circle review-status-<%= review_status %>"></i>
General Comments 0
You need to be logged in to leave comments. Login now