Commit 4ef86096 authored by Robert Lyon's avatar Robert Lyon Committed by Gerrit Code Review
Browse files

Merge "XSS in page content editor (Bug #1375092)"

parents 095e9e22 01afaad8
...@@ -521,7 +521,7 @@ ...@@ -521,7 +521,7 @@
var element = $('#column-container > .row').eq(parseInt(position[0]) - 1).find('.column').eq(parseInt(position[1]) - 1); var element = $('#column-container > .row').eq(parseInt(position[0]) - 1).find('.column').eq(parseInt(position[1]) - 1);
var options = [get_string('blockordertop')]; var options = [get_string('blockordertop')];
element.find('.column-content .blockinstance .blockinstance-header').each(function() { element.find('.column-content .blockinstance .blockinstance-header').each(function() {
options.push(get_string('blockorderafter', $(this).find('h2.title').text())); options.push(get_string('blockorderafter', $(this).find('h2.title').html()));
}); });
var selectbox = $('#addblock_position'); var selectbox = $('#addblock_position');
selectbox.html('<option>' + options.join('</option><option>') + '</option>'); selectbox.html('<option>' + options.join('</option><option>') + '</option>');
......
Supports Markdown
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment