Escape '&'.

2012-01-23 15:34:25 +00:00 · 2012-01-23 15:34:25 +00:00 · fd4ad166dc
parent 4468c92a45
commit fd4ad166dc
1 changed files with 2 additions and 1 deletions
--- a/deps/rabbitmq_management/priv/www/js/formatters.js
+++ b/deps/rabbitmq_management/priv/www/js/formatters.js
@ -309,7 +309,8 @@ function fmt_idle_long(obj) {
 }

 function fmt_escape_html(txt) {
-    return txt.replace(/</g, '&lt;')
+    return txt.replace(/&/g, '&amp;')
+        .replace(/</g, '&lt;')
        .replace(/>/g, '&gt;')
        .replace(/\n/g, '<br/>')
        .replace(/\"/g, '&quot;');