kolan
/
Redmine
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Escape filter values using .text instead of .html. 

git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@10201 e93f8b46-1217-0410-a6f0-8f06a7374b81
This commit is contained in:
Jean-Philippe Lang 2012-08-13 14:59:59 +00:00
parent 861ca78179
commit 11d4d8177c
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
public/javascripts/application.js
View File

@ -130,7 +130,7 @@ function buildFilterRow(field, operator, values) {
select = tr.find('td.operator select');
for (i=0;i<operators.length;i++){
var option = $('<option>').val(operators[i]).html(operatorLabels[operators[i]]);
var option = $('<option>').val(operators[i]).text(operatorLabels[operators[i]]);
if (operators[i] == operator) {option.attr('selected', true)};
select.append(option);
}
@ -151,10 +151,10 @@ function buildFilterRow(field, operator, values) {
var filterValue = filterValues[i];
var option = $('<option>');
if ($.isArray(filterValue)) {
option.val(filterValue[1]).html(filterValue[0]);
option.val(filterValue[1]).text(filterValue[0]);
if (values.indexOf(filterValue[1]) > -1) {option.attr('selected', true)};
} else {
option.val(filterValue).html(filterValue);
option.val(filterValue).text(filterValue);
if (values.indexOf(filterValue) > -1) {option.attr('selected', true)};
}
select.append(option);