loading: Generate properly escaped HTML.

Signed-off-by: Anders Kaseorg <anders@zulip.com>
This commit is contained in:
Anders Kaseorg
2021-02-03 11:42:23 -08:00
committed by Tim Abbott
parent 56d0d30387
commit dc0972b775

View File

@@ -19,10 +19,10 @@ exports.make_indicator = function (outer_container, opts) {
// Create some additional containers to facilitate absolutely
// positioned spinners.
const container_id = container.attr("id");
let inner_container = $('<div id="' + container_id + '_box_container"></div>');
let inner_container = $("<div>", {id: `${container_id}_box_container`});
container.append(inner_container);
container = inner_container;
inner_container = $('<div id="' + container_id + '_box"></div>');
inner_container = $("<div>", {id: `${container_id}_box`});
container.append(inner_container);
container = inner_container;
}