commit | 3534daddeefefbd42ea0a3819348327e5d85315c | [log] [tgz] |
---|---|---|
author | Scott Main <smain@google.com> | Wed Oct 28 09:50:06 2009 -0700 |
committer | Scott Main <smain@google.com> | Wed Oct 28 14:42:40 2009 -0700 |
tree | 923677f09e9473383570b86310103b7aeb1c6066 | |
parent | d14f1bd7e4ba28489bdc472aa736aee5a587cb98 [diff] |
docs: fix XSS vulnerability in search add a function that uses replace() to replace all instances of '<' and '>' with the HTML entities and use this wherever the query text is added onto the page.