Skip to content
GitLab
Menu
Projects
Groups
Snippets
/
Help
Help
Support
Community forum
Keyboard shortcuts
?
Submit feedback
Sign in
Toggle navigation
Menu
Open sidebar
drupal.org
context
Commits
d2ed753a
Commit
d2ed753a
authored
Feb 26, 2019
by
boshtian
Browse files
By boshtian, poiu: Fix XSS in context_reaction_block.js
parent
63da2071
Changes
1
Hide whitespace changes
Inline
Side-by-side
plugins/context_reaction_block.js
View file @
d2ed753a
...
...
@@ -68,7 +68,7 @@ DrupalContextBlockForm = function(blockForm) {
// Hide enabled blocks from selector that are used
$
(
'
table.context-blockform-region tr
'
).
each
(
function
()
{
var
bid
=
$
(
this
).
attr
(
'
id
'
);
var
bid
=
Drupal
.
checkPlain
(
$
(
this
).
attr
(
'
id
'
)
)
;
$
(
'
div.context-blockform-selector input[value="
'
+
bid
+
'
"]
'
).
parents
(
'
div.form-item
'
).
eq
(
0
).
hide
();
});
// Show blocks in selector that are unused
...
...
Write
Preview
Supports
Markdown
0%
Try again
or
attach a new file
.
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment