html escape assignment titles in gradebook importer, refs #3888
Change-Id: Ia13827f3ef8c28c18c74b57093a5ed219e67a88e Reviewed-on: https://gerrit.instructure.com/2408 Reviewed-by: Bracken Mosbacker <bracken@instructure.com> Tested-by: Hudson <hudson@instructure.com>
This commit is contained in:
parent
8868162722
commit
39db2a2199
|
@ -45,7 +45,7 @@ var GradebookUploader = {
|
||||||
$.each(mergedGradebook.assignments, function(){
|
$.each(mergedGradebook.assignments, function(){
|
||||||
gridData.columns.push({
|
gridData.columns.push({
|
||||||
id: this.id,
|
id: this.id,
|
||||||
name: this.title,
|
name: $.htmlEscape(this.title),
|
||||||
field: this.id,
|
field: this.id,
|
||||||
width:200,
|
width:200,
|
||||||
editor: NullGradeEditor,
|
editor: NullGradeEditor,
|
||||||
|
@ -79,7 +79,7 @@ var GradebookUploader = {
|
||||||
else {
|
else {
|
||||||
col = {
|
col = {
|
||||||
id: assignment.id,
|
id: assignment.id,
|
||||||
name: assignment.title,
|
name: $.htmlEscape(assignment.title),
|
||||||
field: assignment.id,
|
field: assignment.id,
|
||||||
formatter: simpleGradeCellFormatter,
|
formatter: simpleGradeCellFormatter,
|
||||||
cssClass: "active new"
|
cssClass: "active new"
|
||||||
|
|
Loading…
Reference in New Issue