From 7f1a19e704af688a98328147fa52d5e93f07f89c Mon Sep 17 00:00:00 2001
From: Sean McArthur <sean.monstar@gmail.com>
Date: Mon, 17 Sep 2012 12:34:39 -0700
Subject: [PATCH] escape email address on manage account page
---
resources/static/pages/js/manage_account.js | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/resources/static/pages/js/manage_account.js b/resources/static/pages/js/manage_account.js
index 5582bd363..e75f0610f 100644
--- a/resources/static/pages/js/manage_account.js
+++ b/resources/static/pages/js/manage_account.js
@@ -89,7 +89,7 @@ BrowserID.manageAccount = (function() {
var template = dom.getInner("#templateUser");
_(emails).each(function(item) {
- var e = item.address;
+ var e = _.escape(item.address);
var identity = substitute(template, { email: e });
var idEl = dom.appendTo(identity, list),
--
GitLab