Error202
/
yii2-swiftmailer
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity
Browse Source

no xss for attribute error messages that contain {value}

tags/2.0.0-beta
Carsten Brandt 11 years ago
parent
266f4f9843
commit
8e4067ec5e
1 changed files with 1 additions and 1 deletions
Whitespace
Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL
Unified View
Diff Options
Show Stats Download Patch File Download Diff File
  1. 2
      framework/yii/assets/yii.activeForm.js

2
framework/yii/assets/yii.activeForm.js
Unescape View File

@ -345,7 +345,7 @@
var $container = $form.find(attribute.container); var $container = $form.find(attribute.container);
var $error = $container.find(attribute.error); var $error = $container.find(attribute.error);
if (hasError) { if (hasError) {
$error.html(messages[attribute.name][0]); $error.text(messages[attribute.name][0]);
$container.removeClass(data.settings.validatingCssClass + ' ' + data.settings.successCssClass) $container.removeClass(data.settings.validatingCssClass + ' ' + data.settings.successCssClass)
.addClass(data.settings.errorCssClass); .addClass(data.settings.errorCssClass);
} else { } else {

Write Preview
Loading…
Cancel
Save