Escape '"' for html too, in case we end up in an attribute.

2011-12-14 14:55:27 +00:00 · 2011-12-14 14:55:27 +00:00 · 6ef2d5637c
parent d1a7b77c28
commit 6ef2d5637c
1 changed files with 2 additions and 1 deletions
--- a/deps/rabbitmq_management/priv/www/js/formatters.js
+++ b/deps/rabbitmq_management/priv/www/js/formatters.js
@ -309,7 +309,8 @@ function fmt_idle_long(obj) {
 function fmt_escape_html(txt) {
    return txt.replace(/</g, '&lt;')
        .replace(/>/g, '&gt;')
-        .replace(/\n/g, '<br/>');
+        .replace(/\n/g, '<br/>')
+        .replace(/\"/g, '&quot;');
 }

 function fmt_maybe_wrap(txt, encoding) {