changeset 799:9f2bc483b7ec feature_14

Fixes the html injection problem in the client side (Bug #341).
author luisf <luis.figueira@eecs.qmul.ac.uk>
date Mon, 21 Nov 2011 17:17:25 +0000
parents 829052890acb
children 95b78e19e586
files vendor/plugins/redmine_tags/assets/javascripts/tags_input.js
diffstat 1 files changed, 1 insertions(+), 1 deletions(-) [+]
line wrap: on
line diff
--- a/vendor/plugins/redmine_tags/assets/javascripts/tags_input.js	Mon Nov 21 17:10:21 2011 +0000
+++ b/vendor/plugins/redmine_tags/assets/javascripts/tags_input.js	Mon Nov 21 17:17:25 2011 +0000
@@ -31,7 +31,7 @@
 		
 		var uri_params = window.location.href.toQueryParams();
 		if (uri_params["project[tag_list]"] != undefined){
-			this.addTag(uri_params["project[tag_list]"], true);			
+			this.addTag(uri_params["project[tag_list]"].stripTags(), true);			
 		};
 		
     Event.observe(this.button, 'click', this.readTags.bind(this));