HomePhorge

Properly escape inline <script>

Description

Properly escape inline <script>

Test Plan:
Loaded Phabricator page, checked the source code. Also:

$c_uri = '//connect.facebook.net/en_US/all.js#xfbml=1&appId=';
echo CelerityStaticResourceResponse::renderInlineScript(
  jsprintf(
    'console.log(%s); // </script>
    %s',
    $c_uri,
    "</script><b>x</b>"));

Reviewers: epriestley, btrahan

Reviewed By: epriestley

CC: aran, Korvin

Differential Revision: https://secure.phabricator.com/D5741

Details

Provenance
Jakub VranaAuthored on Apr 20 2013, 5:55 PM
themackabuPushed on Mar 25 2025, 8:07 PM
Parents
rPb216dc9c2c43: Document where Arcanist configuration can be set
Branches
Loading...
Tags
Loading...

Event Timeline