[FIX] security problem in im

bzr revid: nicolas.vanhoren@openerp.com-20130911163452-jumg8wahlzof4a6l
2013-09-11 18:34:52 +02:00
parent 84e16c9895
commit 298fbff2bb
1 changed files with 1 additions and 1 deletions
@@ -522,7 +522,7 @@ function declare($, _, openerp) {
            var url = _.escape(result[0]);
            txt += '<a href="' + url + '">' + url + '</a>';
        }
-        txt += str.slice(last, str.length);
+        txt += _.escape(str.slice(last, str.length));
        return txt;
    };