am ad231a3: am db7da7e: am d9c8bbd: docs: fix xss issue bug 5125642

scottamain · Android Git Automerger · commit 9c81154dfe88 · 2012-02-09T16:06:31.000-08:00
* commit 'ad231a303ee8fe7f8b51900d7b57971ab9963ad4':
  docs: fix xss issue bug 5125642
diff --git a/docs/html/sdk/download.jd b/docs/html/sdk/download.jd
@@ -52,7 +52,7 @@ onclick="submit()" />
   <script language="javascript">
     var loc = window.location.href;
     if (loc.indexOf('?v=') != -1) {
-      var filename = loc.substring(loc.indexOf('=')+1,loc.length);
+      var filename = loc.substring(loc.indexOf('=')+1,loc.length).replace(/</g,"&lt;").replace(/>/g,"&gt;");
       document.write("File: " + filename);
     }
   </script>

Original file line number	Diff line number	Diff line change
`@@ -52,7 +52,7 @@ onclick="submit()" />`
`52`	`52`	`<script language="javascript">`
`53`	`53`	`var loc = window.location.href;`
`54`	`54`	`if (loc.indexOf('?v=') != -1) {`
`55`		`- var filename = loc.substring(loc.indexOf('=')+1,loc.length);`
	`55`	`+ var filename = loc.substring(loc.indexOf('=')+1,loc.length).replace(/</g,"<").replace(/>/g,">");`
`56`	`56`	`document.write("File: " + filename);`
`57`	`57`	`}`
`58`	`58`	`</script>`