php/yii2
1
0
Fork 0
mirror of https://github.com/yiisoft/yii2.git synced 2025-11-18 23:43:19 +08:00
Code Issues Packages Projects Releases Wiki Activity

no xss for attribute error messages that contain {value}

Browse Source
This commit is contained in:
Carsten Brandt
2013-10-14 20:33:42 +02:00
parent 266f4f9843
commit 8e4067ec5e
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
framework/yii/assets/yii.activeForm.js
View File

@@ -345,7 +345,7 @@
var $container = $form.find(attribute.container);
var $error = $container.find(attribute.error);
if (hasError) {
$error.html(messages[attribute.name][0]);
$error.text(messages[attribute.name][0]);
$container.removeClass(data.settings.validatingCssClass + ' ' + data.settings.successCssClass)
.addClass(data.settings.errorCssClass);
} else {