Ensure role names are escaped in the membership control. Fixes #2606

This commit is contained in:
Murtuza Zabuawala
2017-08-21 14:00:33 +01:00
committed by Dave Page
parent 654326a0d1
commit 2e2ca26020
3 changed files with 140 additions and 2 deletions

View File

@@ -196,7 +196,7 @@ define('pgadmin.node.role', [
} else {
var d = _.extend(
{}, data, {
'opttext': opt.text,
'opttext': _.escape(opt.text),
'optimage': optimage,
'checkbox': false
});
@@ -224,7 +224,7 @@ define('pgadmin.node.role', [
} else {
var d = _.extend(
{}, data, {
'opttext': opt.text,
'opttext': _.escape(opt.text),
'optimage': optimage,
'checkbox': true
}),