docs: fix xss issue

scottamain · scottamain · commit d9c8bbd56a9c · 2012-02-09T15:57:09.000-08:00
bug 5125642

Change-Id: I326b619643e3b3de20aa9303e92c9218fdfe50f7
diff --git a/docs/html/sdk/download.jd b/docs/html/sdk/download.jd
@@ -52,7 +52,7 @@ onclick="submit()" />
   <script language="javascript">
     var loc = window.location.href;
     if (loc.indexOf('?v=') != -1) {
-      var filename = loc.substring(loc.indexOf('=')+1,loc.length);
+      var filename = loc.substring(loc.indexOf('=')+1,loc.length).replace(/</g,"&lt;").replace(/>/g,"&gt;");
       document.write("File: " + filename);
     }
   </script>

Original file line number	Diff line number	Diff line change
`@@ -52,7 +52,7 @@ onclick="submit()" />`
`52`	`52`	`<script language="javascript">`
`53`	`53`	`var loc = window.location.href;`
`54`	`54`	`if (loc.indexOf('?v=') != -1) {`
`55`		`- var filename = loc.substring(loc.indexOf('=')+1,loc.length);`
	`55`	`+ var filename = loc.substring(loc.indexOf('=')+1,loc.length).replace(/</g,"<").replace(/>/g,">");`
`56`	`56`	`document.write("File: " + filename);`
`57`	`57`	`}`
`58`	`58`	`</script>`