escape message in deploy url

sivy · Apr 14, 2011 · e3663e9 · e3663e9
1 parent 3cb355d
commit e3663e9
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/mgapp/templates/app.html b/mgapp/templates/app.html
@@ -7,7 +7,7 @@
     $('#deploy').click(function(){
         $('#output').html('')
         $('#status').html('DEPLOYING');
-        $('#output').load('{% url mgapp.views.deploy_app %}?app_id={{app.id}}&message=' + $('#message').val() + '&env=' + $('#env').val(), function(){
+        $('#output').load('{% url mgapp.views.deploy_app %}?app_id={{app.id}}&message=' + escape($('#message').val()) + '&env=' + $('#env').val(), function(){
             $('#status').html('DEPLOYED');
             $('#deploys').load('{% url mgapp.views.deploys %}?&count=5&partial=true&app_id=' 
                 + $('#app_id').val())