[webdoc] escape <> in fastsearch box URLs by replacing them with {}

mono · Jan 30, 2012 · f216941 · f216941
1 parent ba25c88
commit f216941
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/webdoc/search.js b/webdoc/search.js
@@ -58,7 +58,8 @@ search_input.keyup (function (event) {
 
 		$.each (data, function(key, val) {
 			var item = val.name;
-			items.push('<li><a href="#" onclick="change_page(\''+val.url+'\')" title="'+(val.fulltitle == '' ? val.name : val.fulltitle)+'">' + item + '</a></li>');
+			var url = val.url.replace (/[<>]/g, function (c) { return c == '<' ? '{' : '}'; });
+			items.push('<li><a href="#" onclick="change_page(\''+url+'\')" title="'+(val.fulltitle == '' ? val.name : val.fulltitle)+'">' + item + '</a></li>');
 		});
 
 		var uls = $('<ul/>', { html: items.join (''), 'style': 'list-style-type:none; margin: 0; padding:0' });