mirror of
https://git.proxmox.com/git/proxmox-widget-toolkit
synced 2025-06-30 13:57:15 +00:00
button: htmlEncode the name/id for the confirm message
so we don't accidentally interpret html tags Signed-off-by: Dominik Csapak <d.csapak@proxmox.com>
This commit is contained in:
parent
867bf7e6f5
commit
7bb124c036
@ -141,7 +141,7 @@ Ext.define('Proxmox.button.StdRemoveButton', {
|
||||
} else {
|
||||
text = gettext('Are you sure you want to remove entry {0}');
|
||||
}
|
||||
return Ext.String.format(text, `'${name}'`);
|
||||
return Ext.String.format(text, Ext.htmlEncode(`'${name}'`));
|
||||
},
|
||||
|
||||
handler: function(btn, event, rec) {
|
||||
|
Loading…
Reference in New Issue
Block a user