diff options
author | Connor Shea <connor.james.shea@gmail.com> | 2016-06-21 16:00:01 -0600 |
---|---|---|
committer | Connor Shea <connor.james.shea@gmail.com> | 2016-06-29 15:59:30 -0600 |
commit | 491c213af67ab65ea3f4b40e8cf39558fb378e6b (patch) | |
tree | 679cca20a70bc6258e56ee4acd6aef22b48779a8 /app/assets/javascripts/labels_select.js.coffee | |
parent | 65187efa5c7202e8b6429edfd17ad844cd584a32 (diff) | |
download | gitlab-ce-491c213af67ab65ea3f4b40e8cf39558fb378e6b.tar.gz |
Fix unescaped strings in Underscore templates.underscore-templates
Diffstat (limited to 'app/assets/javascripts/labels_select.js.coffee')
-rw-r--r-- | app/assets/javascripts/labels_select.js.coffee | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/app/assets/javascripts/labels_select.js.coffee b/app/assets/javascripts/labels_select.js.coffee index e95fd96a83f..ce859fedb2d 100644 --- a/app/assets/javascripts/labels_select.js.coffee +++ b/app/assets/javascripts/labels_select.js.coffee @@ -32,9 +32,9 @@ class @LabelsSelect if issueUpdateURL labelHTMLTemplate = _.template( '<% _.each(labels, function(label){ %> - <a href="<%= ["",issueURLSplit[1], issueURLSplit[2],""].join("/") %>issues?label_name[]=<%= _.escape(label.title) %>"> - <span class="label has-tooltip color-label" title="<%= _.escape(label.description) %>" style="background-color: <%= label.color %>; color: <%= label.text_color %>;"> - <%= _.escape(label.title) %> + <a href="<%- ["",issueURLSplit[1], issueURLSplit[2],""].join("/") %>issues?label_name[]=<%- label.title %>"> + <span class="label has-tooltip color-label" title="<%- label.description %>" style="background-color: <%- label.color %>; color: <%- label.text_color %>;"> + <%- label.title %> </span> </a> <% }); %>' |