Issue #2459339 by hgoto, dagmar, klausi, kporras07, David_Rothstein, Fabianx: Log messages should be XSS filtered on display

CHANGELOG.txt

@@ -6,6 +6,7 @@ Drupal 7.51, xxxx-xx-xx (development version)
 - Exceptions thrown in dblog_watchdog() are now caught and ignored.
 - Clarified the warning that appears when modules are missing or have moved.
 - If the page title is "0", it is now displayed.
+- Log messages are now XSS filtered on display.
 - Draggable tables do now work on touch screen devices.
 - Numerous small performance improvements.
 - Numerous small bugfixes.

misc/tabledrag.js

@@ -277,8 +277,8 @@ Drupal.tableDrag.prototype.makeDraggable = function (item) {
 
   // Add the mousedown action for the handle.
   handle.bind('mousedown touchstart pointerdown', function (event) {
-    if(event.originalEvent.type == "touchstart"){
-        event=event.originalEvent.touches[0];
+    if (event.originalEvent.type == "touchstart") {
+      event = event.originalEvent.touches[0];
     }
     // Create a new dragObject recording the event information.
     self.dragObject = {};