mirror of
https://git.proxmox.com/git/proxmox-widget-toolkit
synced 2025-06-30 19:08:58 +00:00
button: htmlEncode the name/id for the confirm message
so we don't accidentally interpret html tags Signed-off-by: Dominik Csapak <d.csapak@proxmox.com>
This commit is contained in:
parent
867bf7e6f5
commit
7bb124c036
@ -141,7 +141,7 @@ Ext.define('Proxmox.button.StdRemoveButton', {
|
|||||||
} else {
|
} else {
|
||||||
text = gettext('Are you sure you want to remove entry {0}');
|
text = gettext('Are you sure you want to remove entry {0}');
|
||||||
}
|
}
|
||||||
return Ext.String.format(text, `'${name}'`);
|
return Ext.String.format(text, Ext.htmlEncode(`'${name}'`));
|
||||||
},
|
},
|
||||||
|
|
||||||
handler: function(btn, event, rec) {
|
handler: function(btn, event, rec) {
|
||||||
|
Loading…
Reference in New Issue
Block a user