forked from 0x2620/oxjs
properly escape user names and list names
This commit is contained in:
parent
e282a3a9e9
commit
68ca199ae3
6 changed files with 18 additions and 6 deletions
|
|
@ -340,7 +340,7 @@ Ox.AnnotationPanel = function(options, self) {
|
|||
{},
|
||||
{id: 'users', title: 'Show Users', disabled: true},
|
||||
{group: 'users', min: 1, max: -1, items: self.users.map(function(user) {
|
||||
return {id: user, title: user, checked:
|
||||
return {id: user, title: Ox.encodeHTMLEntities(user), checked:
|
||||
self.enabledUsers == 'all' || self.enabledUsers.indexOf(user) > -1
|
||||
};
|
||||
})}
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue