RVE-2024-1 properly encode document title passed to js variable

This commit is contained in:
Kijin Sung 2024-01-20 00:41:14 +09:00
parent 152fb4e753
commit 1854700e77
2 changed files with 2 additions and 2 deletions

View file

@ -64,7 +64,7 @@
</li>
</ul>
<script>
var sTitle = '{$oDocument->getTitleText()}';
var sTitle = {json_encode($oDocument->getTitleText())};
jQuery(function($){
$('.twitter').snspost({
type : 'twitter',