paulmataruso/zulip
1
0
Fork 0
mirror of https://github.com/zulip/zulip.git synced 2025-11-11 01:16:19 +00:00
Code Issues Packages Projects Releases Wiki Activity

add_display_time: Note unescaped variable

Browse Source 
(imported from commit 17d683e2bf0e5eabfb1cb2cdb6a1db18d140b5c9)
This commit is contained in:
Keegan McAllister
2012-11-01 14:24:51 -04:00
parent 080c169e90
commit f1809b8f9c
1 changed files with 1 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
zephyr/static/js/zephyr.js
View File

@@ -241,6 +241,7 @@ function add_display_time(message, prev) {
} }
} }
// NB: timestr is HTML, inserted into the document without escaping.
if (include_date) { if (include_date) {
message.timestr = time.toString("MMM dd") + "  " + message.timestr = time.toString("MMM dd") + "  " +
time.toString("HH:mm"); time.toString("HH:mm");