Welcome to mirror list, hosted at ThFree Co, Russian Federation.

github.com/nextcloud/server.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
path: root/apps
diff options
context:
space:
mode:
authorThomas Müller <DeepDiver1975@users.noreply.github.com>2016-09-02 11:35:01 +0300
committerGitHub <noreply@github.com>2016-09-02 11:35:01 +0300
commit8fe2daaa9eff1f9472fc8c67c0407fd39dd1f46f (patch)
tree2a9f844ebcd675a1ab4cdafc48b6b571dfb6f3d3 /apps
parentbb291e2932fe7d06b6f2550a4fb8f950fe196179 (diff)
[stable9.1] Comments field is not properly escaped (#26008) (#26009)
Diffstat (limited to 'apps')
-rw-r--r--apps/comments/js/commentstabview.js2
1 files changed, 1 insertions, 1 deletions
diff --git a/apps/comments/js/commentstabview.js b/apps/comments/js/commentstabview.js
index f71567f04d1..2614d7e9c12 100644
--- a/apps/comments/js/commentstabview.js
+++ b/apps/comments/js/commentstabview.js
@@ -31,7 +31,7 @@
'{{/if}}' +
' </div>' +
' <form class="newCommentForm">' +
- ' <textarea class="message" placeholder="{{newMessagePlaceholder}}">{{{message}}}</textarea>' +
+ ' <textarea class="message" placeholder="{{newMessagePlaceholder}}">{{message}}</textarea>' +
' <input class="submit" type="submit" value="{{submitText}}" />' +
'{{#if isEditMode}}' +
' <input class="cancel" type="button" value="{{cancelText}}" />' +