summaryrefslogtreecommitdiff
path: root/share/www/script/futon.format.js
diff options
context:
space:
mode:
authorJan Lehnardt <jan@apache.org>2010-11-02 22:16:54 +0000
committerJan Lehnardt <jan@apache.org>2010-11-02 22:16:54 +0000
commit4e244a75bf6b352c94a21a131b1ecdcb74e6d3e3 (patch)
tree63a24d7d9e3d1bcba17160a022c616fd8682a1cf /share/www/script/futon.format.js
parent51741863f99edb5bd21e9991aff5d4d718ba4b50 (diff)
Escape URL and cookie input.
git-svn-id: https://svn.apache.org/repos/asf/couchdb/branches/1.0.x@1030262 13f79535-47bb-0310-9956-ffa450edef68
Diffstat (limited to 'share/www/script/futon.format.js')
-rw-r--r--share/www/script/futon.format.js5
1 files changed, 4 insertions, 1 deletions
diff --git a/share/www/script/futon.format.js b/share/www/script/futon.format.js
index 0d536e36..31880764 100644
--- a/share/www/script/futon.format.js
+++ b/share/www/script/futon.format.js
@@ -16,7 +16,10 @@
escape: function(string) {
return string.replace(/&/g, "&amp;")
.replace(/</g, "&lt;")
- .replace(/>/g, "&gt;");
+ .replace(/>/g, "&gt;")
+ .replace(/"/, "&quot;")
+ .replace(/'/, "&#39;;")
+ ;
},
// JSON pretty printing