Escape html chars in Inject/Debug and Info pane

This commit is contained in:
Nick O'Leary
2014-04-09 14:50:53 +01:00
parent 8a646f73b3
commit 10d9dee4aa
3 changed files with 5 additions and 4 deletions

View File

@@ -379,7 +379,7 @@
},
button: {
onclick: function() {
var label = this.name||this.payload;
var label = (this.name||this.payload).replace(/&/g,"&amp;").replace(/</g,"&lt;").replace(/>/g,"&gt;");
d3.xhr("inject/"+this.id).post(function(err,resp) {
if (err) {
if (err.status == 404) {