- Ported a missing Drupal 6.1 security fix.

2008-03-23 14:55:26 +00:00 · 2008-03-23 14:55:26 +00:00 · a01deb1b1a
parent eafa931272
commit a01deb1b1a
1 changed files with 2 additions and 1 deletions
--- a/misc/drupal.js
+++ b/misc/drupal.js
@ -51,7 +51,8 @@ Drupal.checkPlain = function(str) {
  str = String(str);
  var replace = { '&': '&amp;', '"': '&quot;', '<': '&lt;', '>': '&gt;' };
  for (var character in replace) {
-    str = str.replace(character, replace[character]);
+    var regex = new RegExp(character, 'g');
+    str = str.replace(regex, replace[character]);
  }
  return str;
 };