mirror of
https://github.com/zulip/zulip.git
synced 2025-11-05 22:43:42 +00:00
compose: HTML-escape errors from server for compose_error.
Signed-off-by: Anders Kaseorg <anders@zulip.com>
This commit is contained in:
committed by
Tim Abbott
parent
4a3ad0da06
commit
c4b60acf9c
@@ -1,4 +1,5 @@
|
||||
import $ from "jquery";
|
||||
import _ from "lodash";
|
||||
|
||||
import * as channel from "./channel";
|
||||
import * as compose from "./compose";
|
||||
@@ -96,7 +97,7 @@ export function schedule_message(request = compose.create_message_object()) {
|
||||
};
|
||||
const error = function (response) {
|
||||
$("#compose-textarea").prop("disabled", false);
|
||||
compose.compose_error(response, $("#compose-textarea"));
|
||||
compose.compose_error(_.escape(response), $("#compose-textarea"));
|
||||
};
|
||||
/* We are adding a disable on compose under this block because we
|
||||
want slash commands to be blocking in nature. */
|
||||
|
||||
Reference in New Issue
Block a user