properly escape user names and list names

2012-02-22 10:14:25 +00:00 · 2012-02-22 10:14:25 +00:00 · 68ca199ae3
commit 68ca199ae3
parent e282a3a9e9
6 changed files with 18 additions and 6 deletions
--- a/source/Ox.UI/js/Map/Ox.ListMap.js
+++ b/source/Ox.UI/js/Map/Ox.ListMap.js
@ -240,6 +240,9 @@ Ox.ListMap = function(options, self) {
            width: 128
        },
        {
+            format: function(value) {
+                return Ox.encodeHTMLEntities(value);
+            },
            id: 'user',
            operator: '+',
            title: 'User',