fix z3r0 day expl01tz

leedo · Sep 7, 2011 · 7c0202a · 7c0202a
1 parent 22f072b
commit 7c0202a
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/share/static/alice.js b/share/static/alice.js
@@ -9936,7 +9936,7 @@ Object.extend(Alice, {
       }
       else if (node.nodeValue.match(Alice.RE.url)) {
         var span = new Element("SPAN");
-        span.innerHTML = node.nodeValue.replace(
+        span.innerHTML = node.nodeValue.escapeHTML().replace(
           Alice.RE.url, '<a href="$1" target="_blank" rel="noreferrer">$1</a>');
         node.parentNode.replaceChild(span, node);
       }

diff --git a/src/js/alice/src/alice/util.js b/src/js/alice/src/alice/util.js
@@ -63,7 +63,7 @@ Object.extend(Alice, {
       }
       else if (node.nodeValue.match(Alice.RE.url)) {
         var span = new Element("SPAN");
-        span.innerHTML = node.nodeValue.replace(
+        span.innerHTML = node.nodeValue.escapeHTML().replace(
           Alice.RE.url, '<a href="$1" target="_blank" rel="noreferrer">$1</a>');
         node.parentNode.replaceChild(span, node);
       }