diff options
| author | Stas Vilchik <vilchiks@gmail.com> | 2016-09-15 16:19:39 +0200 |
|---|---|---|
| committer | Stas Vilchik <vilchiks@gmail.com> | 2016-09-15 16:19:39 +0200 |
| commit | d1c0148e374c5d6ccc7a2469eb468389a42ae9ef (patch) | |
| tree | 8e0de6b9e89e3ae372a957e32a95b7b33a99684e /server/sonar-web/src/main/js | |
| parent | 0359411125578632c70ccf458625d0163c2b8b16 (diff) | |
| download | sonarqube-d1c0148e374c5d6ccc7a2469eb468389a42ae9ef.tar.gz sonarqube-d1c0148e374c5d6ccc7a2469eb468389a42ae9ef.zip | |
fix SSF-49
Diffstat (limited to 'server/sonar-web/src/main/js')
| -rw-r--r-- | server/sonar-web/src/main/js/apps/quality-profiles/profile-details-view.js | 5 |
1 files changed, 2 insertions, 3 deletions
diff --git a/server/sonar-web/src/main/js/apps/quality-profiles/profile-details-view.js b/server/sonar-web/src/main/js/apps/quality-profiles/profile-details-view.js index a914b3ac6be..226241e67fd 100644 --- a/server/sonar-web/src/main/js/apps/quality-profiles/profile-details-view.js +++ b/server/sonar-web/src/main/js/apps/quality-profiles/profile-details-view.js @@ -20,6 +20,7 @@ import $ from 'jquery'; import _ from 'underscore'; import Marionette from 'backbone.marionette'; +import escapeHtml from 'escape-html'; import ChangeProfileParentView from './change-profile-parent-view'; import ProfileChangelogView from './profile-changelog-view'; import ProfileComparisonView from './profile-comparison-view'; @@ -81,9 +82,7 @@ export default Marionette.LayoutView.extend({ height: 200, readOnly: !this.options.canWrite, focusSearch: false, - format (item) { - return item.name; - }, + format: item => escapeHtml(item.name), searchUrl: window.baseUrl + '/api/qualityprofiles/projects?key=' + encodeURIComponent(key), selectUrl: window.baseUrl + '/api/qualityprofiles/add_project', deselectUrl: window.baseUrl + '/api/qualityprofiles/remove_project', |