paulmataruso/zulip
1
0
Fork 0
mirror of https://github.com/zulip/zulip.git synced 2025-10-31 12:03:46 +00:00
Code Issues Packages Projects Releases Wiki Activity

js: Escape strings interpolated into CSS selectors with CSS.escape.

Browse Source 
Signed-off-by: Anders Kaseorg <anders@zulip.com>
This commit is contained in:
Anders Kaseorg
2021-02-03 14:23:32 -08:00
parent 9fc1adce60
commit aa650a4c88
75 changed files with 309 additions and 246 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
static/js/notifications.js
View File

@@ -190,7 +190,7 @@ function in_browser_notify(message, title, content, raw_operators, opts) {
})
.show();
$(".notification[data-message-id='" + message.id + "']")
$(`.notification[data-message-id='${CSS.escape(message.id)}']`)
.expectOne()
.data("narrow", {
raw_operators,