aboutsummaryrefslogtreecommitdiffstats
path: root/Bugzilla/Template.pm
diff options
context:
space:
mode:
authorByron Jones <glob@mozilla.com>2015-02-24 13:20:35 +0800
committerByron Jones <glob@mozilla.com>2015-02-24 13:20:35 +0800
commit59fcd310de5899533858e6b47c6f8dd77026c92e (patch)
tree924f85298e5b738da8fe84e6e7212bc17b58e278 /Bugzilla/Template.pm
parentd73a35c0d822251fa2ee5b3a6339ca3f6f63bf93 (diff)
downloadbugs-59fcd310de5899533858e6b47c6f8dd77026c92e.tar
bugs-59fcd310de5899533858e6b47c6f8dd77026c92e.tar.gz
bugs-59fcd310de5899533858e6b47c6f8dd77026c92e.tar.bz2
bugs-59fcd310de5899533858e6b47c6f8dd77026c92e.tar.xz
bugs-59fcd310de5899533858e6b47c6f8dd77026c92e.zip
Bug 1134743: javascript filter should escape uncode line and paragraph separators (causes "Unterminated string literal" javascript error)
r=dylan,a=glob
Diffstat (limited to 'Bugzilla/Template.pm')
-rw-r--r--Bugzilla/Template.pm2
1 files changed, 2 insertions, 0 deletions
diff --git a/Bugzilla/Template.pm b/Bugzilla/Template.pm
index 078a8a0d6..f909f5f0d 100644
--- a/Bugzilla/Template.pm
+++ b/Bugzilla/Template.pm
@@ -793,6 +793,8 @@ sub create {
$var =~ s/([\\\'\"\/])/\\$1/g;
$var =~ s/\n/\\n/g;
$var =~ s/\r/\\r/g;
+ $var =~ s/\x{2028}/\\u2028/g; # unicode line separator
+ $var =~ s/\x{2029}/\\u2029/g; # unicode paragraph separator
$var =~ s/\@/\\x40/g; # anti-spam for email addresses
$var =~ s/</\\x3c/g;
$var =~ s/>/\\x3e/g;