luci-base: ui.js: HTML escape uci changelog values

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2019-07-22 17:18:32 +02:00 · 2019-07-22 17:18:32 +02:00 · c67f052d91
commit c67f052d91
parent a6c538a776
1 changed files with 1 additions and 1 deletions
--- a/modules/luci-base/htdocs/luci-static/resources/ui.js
+++ b/modules/luci-base/htdocs/luci-static/resources/ui.js
@ -1797,7 +1797,7 @@ return L.Class.extend({
 								return chg[1];

 						case 4:
-							return "'" + chg[3].replace(/'/g, "'\"'\"'") + "'";
+							return "'%h'".format(chg[3].replace(/'/g, "'\"'\"'"));

 						default:
 							return chg[m1-1];