Escape filter values using .text instead of .html.

git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@10201 e93f8b46-1217-0410-a6f0-8f06a7374b81
This commit is contained in:
Jean-Philippe Lang 2012-08-13 14:59:59 +00:00
parent 861ca78179
commit 11d4d8177c
1 changed files with 3 additions and 3 deletions

View File

@ -130,7 +130,7 @@ function buildFilterRow(field, operator, values) {
select = tr.find('td.operator select'); select = tr.find('td.operator select');
for (i=0;i<operators.length;i++){ for (i=0;i<operators.length;i++){
var option = $('<option>').val(operators[i]).html(operatorLabels[operators[i]]); var option = $('<option>').val(operators[i]).text(operatorLabels[operators[i]]);
if (operators[i] == operator) {option.attr('selected', true)}; if (operators[i] == operator) {option.attr('selected', true)};
select.append(option); select.append(option);
} }
@ -151,10 +151,10 @@ function buildFilterRow(field, operator, values) {
var filterValue = filterValues[i]; var filterValue = filterValues[i];
var option = $('<option>'); var option = $('<option>');
if ($.isArray(filterValue)) { if ($.isArray(filterValue)) {
option.val(filterValue[1]).html(filterValue[0]); option.val(filterValue[1]).text(filterValue[0]);
if (values.indexOf(filterValue[1]) > -1) {option.attr('selected', true)}; if (values.indexOf(filterValue[1]) > -1) {option.attr('selected', true)};
} else { } else {
option.val(filterValue).html(filterValue); option.val(filterValue).text(filterValue);
if (values.indexOf(filterValue) > -1) {option.attr('selected', true)}; if (values.indexOf(filterValue) > -1) {option.attr('selected', true)};
} }
select.append(option); select.append(option);