Reflected XSS vulnerability fix

pboling · Feb 27, 2014 · c7ad2ce · c7ad2ce
1 parent 50e7749
commit c7ad2ce
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/vendor/assets/javascripts/flash.js.erb b/vendor/assets/javascripts/flash.js.erb
@@ -15,7 +15,7 @@ Flash.writeDataTo = function(name, element, callback) {
   var message = "";
   if (Flash.data[name]) {
     message = Flash.data[name].toString().replace(/\+/g, ' ');
-    element.html(message);
+    element.text(message);
     if (callback && typeof(callback) === 'function') {
       callback(element);
     } else {