Merge pull request #1530 from yyamano/fix-xss

Fix a XSS issue.
2015-12-09 15:15:16 -08:00
parent 1ae098e390 8bed8b665d
commit 1945404efe
1 changed files with 1 additions and 1 deletions
--- a/src/main/javascript/SwaggerUi.js
+++ b/src/main/javascript/SwaggerUi.js
@@ -181,7 +181,7 @@ window.SwaggerUi = Backbone.Router.extend({
    var $msgbar = $('#message-bar');
    $msgbar.removeClass('message-fail');
    $msgbar.addClass('message-success');
-    $msgbar.html(data);
+    $msgbar.text(data);
    if(window.SwaggerTranslator) {
      window.SwaggerTranslator.translate($msgbar);
    }