From 850be8309a27e94ce44e8a5e8eca79f3e83ae640 Mon Sep 17 00:00:00 2001
From: Stas Vilchik <vilchiks@gmail.com>
Date: Thu, 20 Nov 2014 11:36:45 +0100
Subject: [PATCH] Fix flash vulneribility

---
 .../main/webapp/WEB-INF/app/views/layouts/_footer.html.erb  | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/server/sonar-web/src/main/webapp/WEB-INF/app/views/layouts/_footer.html.erb b/server/sonar-web/src/main/webapp/WEB-INF/app/views/layouts/_footer.html.erb
index e4985adb843..687ca6b6db8 100644
--- a/server/sonar-web/src/main/webapp/WEB-INF/app/views/layouts/_footer.html.erb
+++ b/server/sonar-web/src/main/webapp/WEB-INF/app/views/layouts/_footer.html.erb
@@ -10,8 +10,8 @@
 
 
 </body><script>
-<% if flash[:notice] %>info('<%=escape_javascript(flash[:notice])-%>');<% end %>
-<% if flash[:warning] %>warning('<%=escape_javascript(flash[:warning])-%>');<% end %>
-<% if flash[:error] %>error('<%=escape_javascript(flash[:error])-%>');<% end %>
+<% if flash[:notice] %>info('<%= h escape_javascript(flash[:notice])-%>');<% end %>
+<% if flash[:warning] %>warning('<%= h escape_javascript(flash[:warning])-%>');<% end %>
+<% if flash[:error] %>error('<%= h escape_javascript(flash[:error])-%>');<% end %>
 </script>
 </html>
-- 
2.39.5