1
0
mirror of https://git.tt-rss.org/git/tt-rss.git synced 2025-12-13 22:25:55 +00:00

prevent absolutely useless 'exploit' (not really) while editing filters (closes #572)

This commit is contained in:
Andrew Dolgov
2013-03-17 14:55:55 +04:00
parent 26e2b18433
commit f01c8ec4f1
2 changed files with 3 additions and 1 deletions

View File

@@ -964,6 +964,8 @@ function createNewRuleElement(parentNode, replaceNode) {
try {
var form = document.forms["filter_new_rule_form"];
form.reg_exp.value = form.reg_exp.value.replace(/(<([^>]+)>)/ig,"");
var query = "backend.php?op=pref-filters&method=printrulename&rule="+
param_escape(dojo.formToJson(form));