IntenseWebs/discourse
3
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2026-07-30 08:08:20 -05:00
Code Issues Packages Projects Releases Wiki Activity

sanitize flair style

Browse Source
This commit is contained in:
Neil Lalonde
2016-08-17 15:13:15 -04:00
parent d079f69b7b
commit 2654060c14
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
app/assets/javascripts/discourse/widgets/post.js.es6
+2 -2
View File
@@ -91,10 +91,10 @@ createWidget('post-avatar-flair', {
buildAttributes(attrs) {
var style = '';
if (attrs.primaryGroupFlairUrl) {
style += 'background-image: url(' + attrs.primaryGroupFlairUrl + '); ';
style += 'background-image: url(' + Handlebars.Utils.escapeExpression(attrs.primaryGroupFlairUrl) + '); ';
}
if (attrs.primaryGroupFlairBgColor) {
style += 'background-color: #' + attrs.primaryGroupFlairBgColor + '; ';
style += 'background-color: #' + Handlebars.Utils.escapeExpression(attrs.primaryGroupFlairBgColor) + '; ';
}
return {style: style};
}