XSS in select2

getsentry · Mar 6, 2013 · a110a98 · a110a98
1 parent 10aeea5
commit a110a98
Show file tree

Hide file tree

Showing 3 changed files with 4 additions and 3 deletions.
diff --git a/src/sentry/static/sentry/scripts/app.js b/src/sentry/static/sentry/scripts/app.js
@@ -140,8 +140,8 @@
                                 var results = [];
                                 $(data.results).each(function(_, val){
                                     results.push({
-                                        id: val,
-                                        text: val
+                                        id: app.utils.escape(val),
+                                        text: app.utils.escape(val)
                                     });
                                 });
                                 return {results: results};