Added xss warning string (#31235)

joomla · Feb 27, 2021 · f97f286 · f97f286
1 parent 8be1b9f
commit f97f286
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/media/system/js/core-uncompressed.js b/media/system/js/core-uncompressed.js
@@ -310,6 +310,7 @@ Joomla.editors.instances = Joomla.editors.instances || {
 	/**
 	 * Render messages send via JSON
 	 * Used by some javascripts such as validate.js
+	 * PLEASE NOTE: do NOT use user supplied input in messages as potential HTML markup is NOT sanitized!
 	 *
 	 * @param   {object}  messages    JavaScript object containing the messages to render. Example:
 	 *                              var messages = {