##// END OF EJS Templates
Escape filter values using .text instead of .html....
Jean-Philippe Lang -
r10018:11d4d8177c7b
parent child
Show More
@@ -130,7 +130,7 function buildFilterRow(field, operator, values) {
130 130
131 131 select = tr.find('td.operator select');
132 132 for (i=0;i<operators.length;i++){
133 var option = $('<option>').val(operators[i]).html(operatorLabels[operators[i]]);
133 var option = $('<option>').val(operators[i]).text(operatorLabels[operators[i]]);
134 134 if (operators[i] == operator) {option.attr('selected', true)};
135 135 select.append(option);
136 136 }
@@ -151,10 +151,10 function buildFilterRow(field, operator, values) {
151 151 var filterValue = filterValues[i];
152 152 var option = $('<option>');
153 153 if ($.isArray(filterValue)) {
154 option.val(filterValue[1]).html(filterValue[0]);
154 option.val(filterValue[1]).text(filterValue[0]);
155 155 if (values.indexOf(filterValue[1]) > -1) {option.attr('selected', true)};
156 156 } else {
157 option.val(filterValue).html(filterValue);
157 option.val(filterValue).text(filterValue);
158 158 if (values.indexOf(filterValue) > -1) {option.attr('selected', true)};
159 159 }
160 160 select.append(option);
General Comments 0
You need to be logged in to leave comments. Login now