Group: escape angled brackets in group name. Fixes #1206

This commit is contained in:
Rob Garrison 2016-05-05 07:45:58 -05:00
parent 715fe7842c
commit 263124393e
No known key found for this signature in database
GPG Key ID: 0A42D160D71978E1
2 changed files with 3 additions and 2 deletions

File diff suppressed because one or more lines are too long

View File

@ -169,12 +169,13 @@
},
groupHeaderHTML : function( c, wo, data ) {
var name = data.currentGroup.replace(/</g, '&lt;').replace(/>/g, '&gt');
return '<tr class="group-header ' + c.selectorRemove.slice(1) +
'" unselectable="on" ' + ( c.tabIndex ? 'tabindex="0" ' : '' ) + 'data-group-index="' +
( data.groupIndex++ ) + '">' +
'<td colspan="' + c.columns + '">' +
( wo.group_collapsible ? '<i/>' : '' ) +
'<span class="group-name">' + data.currentGroup + '</span>' +
'<span class="group-name">' + name + '</span>' +
'<span class="group-count"></span>' +
'</td></tr>';
},