Prevents a potential XSS attack coming from wagtail.io.

This commit is contained in:
Bertrand Bordage 2018-03-06 23:27:37 +01:00
parent 432e627054
commit 8f45392861

View file

@ -39,7 +39,7 @@ $(function() {
try {
if (data.version && gtVersion(data.version, currentVersion)) {
var $container = $('.panel-upgrade-notification')
$('.newversion', $container).html(data.version);
$('.newversion', $container).text(data.version);
$('.releasenotes-link', $container).attr('href', data.url);
$container.show();
}