Escape project.name in invitation page

stable
David Barragán Merino 2014-10-13 13:11:50 +02:00
parent 22d1b361f0
commit ae7e77216e
1 changed files with 2 additions and 2 deletions

View File

@ -364,7 +364,7 @@ InvitationDirective = ($auth, $confirm, $location, $params, $navUrls, $analytics
$analytics.trackEvent("auth", "invitationAccept", "invitation accept with existing user", 1)
$location.path($navUrls.resolve("project", {project: $scope.invitation.project_slug}))
$confirm.notify("success", "You've successfully joined this project",
"Welcome to #{$scope.invitation.project_name}")
"Welcome to #{_.escape($scope.invitation.project_name)}")
onErrorSubmitLogin = (response) ->
$confirm.notify("light-error", "According to our Oompa Loompas, your are not registered yet or
@ -393,7 +393,7 @@ InvitationDirective = ($auth, $confirm, $location, $params, $navUrls, $analytics
$analytics.trackEvent("auth", "invitationAccept", "invitation accept with new user", 1)
$location.path($navUrls.resolve("project", {project: $scope.invitation.project_slug}))
$confirm.notify("success", "You've successfully joined this project",
"Welcome to #{$scope.invitation.project_name}")
"Welcome to #{_.escape($scope.invitation.project_name)}")
onErrorSubmitRegister = (response) ->
$confirm.notify("light-error", "According to our Oompa Loompas, that