From 298fbff2bb865f6a79d52d36ac5409766238e285 Mon Sep 17 00:00:00 2001
From: niv-openerp <nicolas.vanhoren@openerp.com>
Date: Wed, 11 Sep 2013 18:34:52 +0200
Subject: [PATCH] [FIX] security problem in im

bzr revid: nicolas.vanhoren@openerp.com-20130911163452-jumg8wahlzof4a6l
---
 addons/im/static/src/js/im_common.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/addons/im/static/src/js/im_common.js b/addons/im/static/src/js/im_common.js
index e0692edca2b..43ffdd982a0 100644
--- a/addons/im/static/src/js/im_common.js
+++ b/addons/im/static/src/js/im_common.js
@@ -522,7 +522,7 @@ function declare($, _, openerp) {
             var url = _.escape(result[0]);
             txt += '<a href="' + url + '">' + url + '</a>';
         }
-        txt += str.slice(last, str.length);
+        txt += _.escape(str.slice(last, str.length));
         return txt;
     };