Merge pull request #6 from moxley/escape_output

Properly escape data for injection into HTML
fcoury · Mar 5, 2014 · 5e0dd82 · 5e0dd82
2 parents 93e9ac7 + 9504334
commit 5e0dd82
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/lib/rspec-view.coffee b/lib/rspec-view.coffee
@@ -83,10 +83,10 @@ class RSpecView extends ScrollView
   addOutput: (output) =>
 
     output = "#{output}"
-    output = output.replace /([^\s]*:[0-9]+)/g, (match) ->
+    output = output.replace /([^\s]*:[0-9]+)/g, (match) =>
       file = match.split(":")[0]
       line = match.split(":")[1]
-      "<a href='#{file}' data-line='#{line}' data-file='#{file}'>#{match}</a>"
+      $$$ -> @a href: file, 'data-line': line, 'data-file': file, match
 
     @spinner.hide()
     @output.append("#{output}")