Remove {{message}}
interpolation.
It's not used and confuses people. Instead the message gets inserted via `$.text`, to avoid injection attacks.
This commit is contained in:
parent
1b264461d7
commit
ec9ed96568
@ -344,7 +344,6 @@
|
||||
'time': msg_time.format('hh:mm'),
|
||||
'isodate': msg_time.format(),
|
||||
'username': username,
|
||||
'message': '',
|
||||
'extra_classes': extra_classes
|
||||
})
|
||||
)).children('.chat-msg-content').first().text(text)
|
||||
|
@ -1,4 +1,4 @@
|
||||
<div class="chat-message {{extra_classes}}" data-isodate="{{isodate}}">
|
||||
<span class="chat-msg-author chat-msg-{{sender}}">{{time}} **{{username}} </span>
|
||||
<span class="chat-msg-content">{{message}}</span>
|
||||
<span class="chat-msg-content"><!-- message gets added here via renderMessage --></span>
|
||||
</div>
|
||||
|
@ -1,4 +1,4 @@
|
||||
<div class="chat-message {{extra_classes}}" data-isodate="{{isodate}}" data-msgid="{{msgid}}">
|
||||
<span class="chat-msg-author chat-msg-{{sender}}">{{time}} {{username}}: </span>
|
||||
<span class="chat-msg-content">{{message}}</span>
|
||||
<span class="chat-msg-content"><!-- message gets added here via renderMessage --></span>
|
||||
</div>
|
||||
|
Loading…
Reference in New Issue
Block a user