diff options
| author | Jo-Philipp Wich <jo@mein.io> | 2020-03-15 17:48:40 +0100 |
|---|---|---|
| committer | Jo-Philipp Wich <jo@mein.io> | 2020-03-15 17:48:40 +0100 |
| commit | 5d7dc391d4af4ad5dd6d7e1f6ef9891aa21fd220 (patch) | |
| tree | 8b9716d43e0aa4b59cde300686db8b5b3e60ec04 /themes/luci-theme-openwrt | |
| parent | 03af89a24b52c152a97b4624098a64b597327b87 (diff) | |
themes: ensure that data-page attribute is escaped
Fixes: #3757
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
Diffstat (limited to 'themes/luci-theme-openwrt')
| -rw-r--r-- | themes/luci-theme-openwrt/luasrc/view/themes/openwrt.org/header.htm | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/themes/luci-theme-openwrt/luasrc/view/themes/openwrt.org/header.htm b/themes/luci-theme-openwrt/luasrc/view/themes/openwrt.org/header.htm index a5e64cac5a..f691e7066d 100644 --- a/themes/luci-theme-openwrt/luasrc/view/themes/openwrt.org/header.htm +++ b/themes/luci-theme-openwrt/luasrc/view/themes/openwrt.org/header.htm @@ -188,7 +188,7 @@ //]]></script> <title><%=striptags( (boardinfo.hostname or "?") .. ( (node and node.title) and ' - ' .. translate(node.title) or '')) %> - LuCI</title> </head> -<body class="lang_<%=luci.i18n.context.lang%>" data-page="<%= table.concat(disp.context.requestpath, "-") %>"> +<body class="lang_<%=luci.i18n.context.lang%>" data-page="<%= pcdata(table.concat(disp.context.requestpath, "-")) %>"> <p class="skiplink"> <span id="skiplink1"><a href="#navigation"><%:Skip to navigation%></a></span> |