fixed injection issue (bug 333034)

git-svn-id: svn://10.0.0.236/trunk@193778 18797224-902f-48f8-a5cc-f745e15eee43
2006-04-07 02:10:46 +00:00
parent 572d0662e7
commit 40eddb5ac8
1 changed files with 1 additions and 1 deletions
--- a/mozilla/webtools/addons/public/htdocs/js/auth.js
+++ b/mozilla/webtools/addons/public/htdocs/js/auth.js
@@ -31,5 +31,5 @@ function readCookie(name)
 /* Someone should make this a js builtin */
 function htmlEntities(str)
 {
-    return str.replace('&','&amp;').replace('<','&lt;').replace('>','&gt;').replace('"','&quot;').replace('+','&nbsp;');
+    return str.replace(/&/g,'&amp;').replace(/</g,'&lt;').replace(/>/g,'&gt;').replace(/"/g,'&quot;').replace(/\+/g,'&nbsp;');
 }