From: Jean-Baptiste Lievremont <jean-baptiste.lievremont@sonarsource.com>
Date: Wed, 22 Oct 2014 09:04:23 +0000 (+0200)
Subject: SONAR-5758 Apply CSV escaping on classic rule activation params
X-Git-Tag: 4.5.1-RC1~6
X-Git-Url: https://source.dussan.org/?a=commitdiff_plain;h=ce5550c7ea0f111517559315ce33f1281012576c;p=sonarqube.git

SONAR-5758 Apply CSV escaping on classic rule activation params
---

diff --git a/server/sonar-web/src/main/coffee/coding-rules/views/coding-rules-quality-profile-activation-view.coffee b/server/sonar-web/src/main/coffee/coding-rules/views/coding-rules-quality-profile-activation-view.coffee
index 785075e167f..d6addd2db4e 100644
--- a/server/sonar-web/src/main/coffee/coding-rules/views/coding-rules-quality-profile-activation-view.coffee
+++ b/server/sonar-web/src/main/coffee/coding-rules/views/coding-rules-quality-profile-activation-view.coffee
@@ -28,7 +28,7 @@ define [
       params = @ui.qualityProfileParameters.map(->
         key: jQuery(@).prop('name'), value: jQuery(@).val() || jQuery(@).prop('placeholder') || '').get()
 
-      paramsHash = (params.map (param) -> param.key + '=' + param.value).join(';')
+      paramsHash = (params.map (param) -> param.key + '=' + window.csvEscape(param.value)).join(';')
 
       if @model
         profileKey = @model.get('qProfile')