From 4e244a75bf6b352c94a21a131b1ecdcb74e6d3e3 Mon Sep 17 00:00:00 2001
From: Jan Lehnardt <jan@apache.org>
Date: Tue, 2 Nov 2010 22:16:54 +0000
Subject: Escape URL and cookie input.

git-svn-id: https://svn.apache.org/repos/asf/couchdb/branches/1.0.x@1030262 13f79535-47bb-0310-9956-ffa450edef68
---
 share/www/session.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'share/www/session.html')

diff --git a/share/www/session.html b/share/www/session.html
index 581640b0..0ebd943d 100644
--- a/share/www/session.html
+++ b/share/www/session.html
@@ -36,7 +36,7 @@ specific language governing permissions and limitations under the License.
           }
           m = qp.match(/reason=(.*)/);
           if (m) {
-            reason = decodeURIComponent(m[1]);
+            reason = $.futon.escape(decodeURIComponent(m[1]));
           }
         });
         if (reason) {
-- 
cgit v1.2.3