HTML-escape page title in watchlist JSON response (Bug 1472439)

Change-Id: I445c763b09928ce03ae8561605e593bc23bba122

HTML-escape page title in watchlist JSON response (Bug 1472439)
Change-Id: I445c763b09928ce03ae8561605e593bc23bba122
539d323f · Aaron Wells · 7a7f066d · 539d323f
Commit 539d323f authored Jul 08, 2015 by Aaron Wells
Hide whitespace changes
Inline Side-by-side

Showing with 1 addition and 1 deletion

htdocs/view/togglewatchlist.json.php htdocs/view/togglewatchlist.json.php +1 -1

No files found.
--- a/htdocs/view/togglewatchlist.json.php
+++ b/htdocs/view/togglewatchlist.json.php
@@ -31,7 +31,7 @@ if (!can_view_view($view)) {
    json_reply('local', $result);
 }

-$title = $view->get('title');
+$title = hsc($view->get('title'));

 if (get_record('usr_watchlist_view', 'usr', $data->usr, 'view', $viewid)) {
    if (!delete_records('usr_watchlist_view', 'usr', $data->usr, 'view', $viewid)) {