Changeset 6168 for trunk/prototype/modules/filters/filters.js

Timestamp:

05/11/12 16:48:10 (12 years ago)

Author:

airton

Message:

Ticket #2719 - Nao permitir tags html na janela de filtros de mensagens

File:

• trunk/prototype/modules/filters/filters.js (modified) (1 diff)

trunk/prototype/modules/filters/filters.js

@@ -191 +191 @@
     return {
                 //id: form.name,
-                name: form.name ? form.name : nameObj.val(),
+                name: form.name ? form.name.replace(/&/g,'&amp;').replace(/</g,'&lt;').replace(/>/g,'&gt;') : nameObj.val().replace(/&/g,'&amp;').replace(/</g,'&lt;').replace(/>/g,'&gt;'),
                 isExact: ( form.isExact === "and" ),
                 criteria: $.map( form.criteriaOperator || [], function( criteriaOperator, i ){  
                         return (!form.criteriaValue[i]) ? null:
                         { 
-                                        value:  form.criteriaValue[i],
+                                        value:  form.criteriaValue[i].replace(/&/g,'&amp;').replace(/</g,'&lt;').replace(/>/g,'&gt;'),
                                         operator: criteriaOperator,
-                                        field:  form.criteriaType[i]
+                                        field:  form.criteriaType[i].replace(/&/g,'&amp;').replace(/</g,'&lt;').replace(/>/g,'&gt;')
                         };
                 }),