Closed Bug 520990 Opened 16 years ago Closed 16 years ago

[dashboard][shipping] Lack of escaping in customizeRow

Categories

(Mozilla Localizations :: Infrastructure, defect)

Product:
Mozilla Localizations
Component:
Infrastructure
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

(Not tracked)

Status:
RESOLVED FIXED

People

(Reporter: Pike, Assigned: zbraniecki)

Details

In customizeRow, the 'revision' handling needs to escape the data, in particular, right now, tags in comments get injected into the page.
fxd http://hg.mozilla.org/l10n/django-site/rev/2d98e261c417
Status: NEW → RESOLVED
Closed: 16 years ago
Resolution: --- → FIXED
Reopening, escape(' ') is '%20' which is not parsed into ' ' again. Per chat with gandalf, this should be morphed into using straight jquery to set a text node or attribute.
Status: RESOLVED → REOPENED
Resolution: FIXED → ---
http://hg.mozilla.org/l10n/django-site/rev/4e3317ab577a
Status: REOPENED → RESOLVED
Closed: 16 years ago → 16 years ago
Resolution: --- → FIXED
Assignee: nobody → gandalf
Summary: [dashboard][signoff] Lack of escaping in customizeRow → [dashboard][shipping] Lack of escaping in customizeRow
You need to log in before you can comment on or make changes to this bug.