forked from GNUsocial/gnu-social
Escaping internal JavaScript
This commit is contained in:
@@ -98,9 +98,13 @@ class RealtimePlugin extends Plugin
|
||||
}
|
||||
|
||||
$action->elementStart('script', array('type' => 'text/javascript'));
|
||||
$action->raw("$(document).ready(function() { ");
|
||||
$action->raw($this->_updateInitialize($timeline, $user_id));
|
||||
$action->raw(" });");
|
||||
$action->raw('
|
||||
<!--
|
||||
$(document).ready(function() {
|
||||
' . $this->_updateInitialize($timeline, $user_id) . '
|
||||
});
|
||||
-->
|
||||
');
|
||||
$action->elementEnd('script');
|
||||
|
||||
return true;
|
||||
|
Reference in New Issue
Block a user