From 70c44702e9fe94987901a9d436fd0b57301ae14f Mon Sep 17 00:00:00 2001
From: Uma <uma.s@vtiger.com>
Date: Thu, 17 Oct 2019 16:21:12 +0530
Subject: [PATCH] xss validation for compose window to field
---
layouts/v7/modules/Emails/resources/MassEdit.js | 8 ++------
1 file changed, 2 insertions(+), 6 deletions(-)
diff --git a/layouts/v7/modules/Emails/resources/MassEdit.js b/layouts/v7/modules/Emails/resources/MassEdit.js
index 3dbddacb2..e6ef44601 100644
--- a/layouts/v7/modules/Emails/resources/MassEdit.js
+++ b/layouts/v7/modules/Emails/resources/MassEdit.js
@@ -222,7 +222,7 @@ jQuery.Class("Emails_MassEdit_Js",{},{
jQuery(e.currentTarget).hide();
});
},
-
+
/**
* Function which will handle the reference auto complete event registrations
* @params - container <jQuery> - element in which auto complete fields needs to be searched
@@ -242,7 +242,7 @@ jQuery.Class("Emails_MassEdit_Js",{},{
'dataType' : 'json',
'data' : function(term,page){
var data = {};
- data['searchValue'] = encodeURIComponent(term);
+ data['searchValue'] = term;
return data;
},
'results' : function(data){
@@ -281,10 +281,6 @@ jQuery.Class("Emails_MassEdit_Js",{},{
return { id: term, text: term };
}
},
- escapeMarkup: function(m) {
- // Do not escape HTML in the select options text
- return m;
- },
}).on("change", function (selectedData) {
var addedElement = selectedData.added;
--
GitLab