Item13446: prevent entities in PERL values being expanded by the brow…

…ser when injecting into a textarea
foswiki · Jun 9, 2015 · 5e45cee · 5e45cee
1 parent fa78794
commit 5e45cee
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/ConfigurePlugin/pub/System/ConfigurePlugin/types.uncompressed.js b/ConfigurePlugin/pub/System/ConfigurePlugin/types.uncompressed.js
@@ -28,6 +28,7 @@ var Types = {};
               cols = m[1];
               rows = m[2];
               value = typeof(val) === "undefined" ? '' : val;
+              value = value.replace(/&/g, "&amp;");
               this.$ui = $('<textarea id="' + _id_ify(this.spec.keys) + 
                           '" rows="' + rows + 
                           '" cols="' + cols +