paulmataruso/zulip
1
0
Fork 0
mirror of https://github.com/zulip/zulip.git synced 2025-11-03 05:23:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

js: Escape strings interpolated into CSS selectors with CSS.escape.

Browse Source 
Signed-off-by: Anders Kaseorg <anders@zulip.com>
This commit is contained in:
Anders Kaseorg
2021-02-03 14:23:32 -08:00
parent 9fc1adce60
commit aa650a4c88
75 changed files with 309 additions and 246 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
static/js/buddy_list.js
View File

@@ -23,7 +23,7 @@ class BuddyListConf {
get_li_from_key(opts) {
const user_id = opts.key;
const container = $(this.container_sel);
return container.find(this.item_sel + "[data-user-id='" + user_id + "']");
return container.find(`${this.item_sel}[data-user-id='${CSS.escape(user_id)}']`);
}
get_key_from_li(opts) {