Leahnaya/pokemon-showdown-client
1
0
Fork 0
mirror of https://github.com/smogon/pokemon-showdown-client.git synced 2026-10-01 07:10:46 -05:00
Code Issues Actions Packages Projects Releases Wiki Activity

Fix XSS vulnerability in previous version of -fail unboost

Browse Source
This commit is contained in:
Marty-D
2015-10-21 11:14:08 -04:00
parent bb01378673
commit dcdfb4a8ba
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
js/battle.js
View File

@@ -3758,7 +3758,8 @@ var Battle = (function () {
actions += '' + ofpoke.getName() + ' surrounded itself with a veil of petals!';
break;
default:
actions += "" + poke.getName() + "'s " + (args[3] ? args[3] + " was" : "stats were") + " not lowered!";
var stat = Tools.escapeHTML(args[3]);
actions += "" + poke.getName() + "'s " + (stat ? stat + " was" : "stats were") + " not lowered!";
}
break;
default: