SQ 4.1 bugfixes

Fix XSS on favorite filters (issues page edition)
(cherry picked from commit f12a558)

diff --git a/sonar-server/src/main/webapp/WEB-INF/app/views/issues/_filter_favourites2.html.erb b/sonar-server/src/main/webapp/WEB-INF/app/views/issues/_filter_favourites2.html.erb
index 845bde9275278b3fd0e119d3f9632a7ed0127a39..4c6dfd34e2726c9ad64d2c0413c336354f875de1 100644 (file)
--- a/sonar-server/src/main/webapp/WEB-INF/app/views/issues/_filter_favourites2.html.erb
+++ b/sonar-server/src/main/webapp/WEB-INF/app/views/issues/_filter_favourites2.html.erb
@@ -1,7 +1,7 @@
 <% if logged_in? %>
   {
     <% @favourite_filters.each do |filter| %>
-        '<%= filter.id -%>': '<%= h filter.name -%>',
+      "<%= h filter.id -%>": "<%= escape_javascript filter.name %>",
     <% end %>
   }
 <% else %>