Changeset 3000:c253e82bd552 for plugins/dcCKEditor/js/popup_link.js

Timestamp:

04/27/15 13:01:58 (10 years ago)

Author:

Nicolas <nikrou77@…>

Branch:

default

Message:

Fix #2062 - quotes were not encoded in attributes

File:

• plugins/dcCKEditor/js/popup_link.js (modified) (1 diff)

plugins/dcCKEditor/js/popup_link.js

@@ -24 +24 @@
                link.setAttribute('href', insert_form.elements.href.value);
                if (insert_form.elements.title.value!='') {
-                    link.setAttribute('title', insert_form.elements.title.value);
+                    link.setAttribute(
+                         'title',
+                         window.opener.CKEDITOR.tools.htmlEncodeAttr(insert_form.elements.title.value)
+                    );
                }
                if (insert_form.elements.hreflang.value!='') {
-                    link.setAttribute('hreflang', insert_form.elements.hreflang.value);
+                    link.setAttribute(
+                         'hreflang',
+                         window.opener.CKEDITOR.tools.htmlEncodeAttr(insert_form.elements.hreflang.value)
+                    );
                }
                if (editor.getSelection().getSelectedElement()!=null) {