Escaped title using Security.escapeHTML()

2012-07-22 19:07:14 +02:00 · 2012-07-22 19:07:14 +02:00 · 14582d1eba
parent 8630de66bf
commit 14582d1eba
1 changed files with 1 additions and 1 deletions
--- a/src/node/utils/ExportHtml.js
+++ b/src/node/utils/ExportHtml.js
@ -469,7 +469,7 @@ exports.getPadHTMLDocument = function (padId, revNum, noDocType, callback)
    var head = 
      (noDocType ? '' : '<!doctype html>\n') + 
      '<html lang="en">\n' + (noDocType ? '' : '<head>\n' + 
-	'<title>' + padId + '</title>\n' +
+	'<title>' + Security.escapeHTML(padId) + '</title>\n' +
        '<meta charset="utf-8">\n' + 
        '<style> * { font-family: arial, sans-serif;\n' + 
          'font-size: 13px;\n' +