Skip to content

escape html when setting selected item to prevent xss #1806

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
wants to merge 1 commit into from
Closed

escape html when setting selected item to prevent xss #1806

wants to merge 1 commit into from

Conversation

meleyal
Copy link

@meleyal meleyal commented Mar 3, 2014

No description provided.

@koenpunt
Copy link
Contributor

koenpunt commented Mar 8, 2014

Is escapeHTML a common method?
If so this should also be added in the jQuery version.

@krotik
Copy link

krotik commented May 21, 2014

The method escapeHTML() is part of prototype.js. The issue seems to be specific to the prototype version.

@adunkman adunkman mentioned this pull request Mar 3, 2015
Merged
@pfiller
Copy link
Contributor

pfiller commented Mar 3, 2015

#2254 does this in a way that works for both versions of Chosen. Going to close this in favor of that solution.

Thanks, @meleyal.

@pfiller pfiller closed this Mar 3, 2015
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
4 participants
@meleyal @koenpunt @krotik @pfiller