paulmataruso/zulip
1
0
Fork 0
mirror of https://github.com/zulip/zulip.git synced 2025-11-01 20:44:04 +00:00
Code Issues Packages Projects Releases Wiki Activity

js: Escape strings interpolated into CSS selectors with CSS.escape.

Browse Source 
Signed-off-by: Anders Kaseorg <anders@zulip.com>
This commit is contained in:
Anders Kaseorg
2021-02-03 14:23:32 -08:00
parent 9fc1adce60
commit aa650a4c88
75 changed files with 309 additions and 246 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
static/js/settings_profile_fields.js
View File

@@ -209,8 +209,8 @@ function delete_choice_row(e) {
function get_profile_field_info(id) {
const info = {};
info.row = $("tr.profile-field-row[data-profile-field-id='" + id + "']");
info.form = $("tr.profile-field-form[data-profile-field-id='" + id + "']");
info.row = $(`tr.profile-field-row[data-profile-field-id='${CSS.escape(id)}']`);
info.form = $(`tr.profile-field-form[data-profile-field-id='${CSS.escape(id)}']`);
return info;
}