[#149] Filter out chars to prevent XSS

scaron · May 7, 2015 · 36463d4 · boblastpass · Jun 16, 2015 · 36463d4
1 parent d0a7a04
commit 36463d4
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/js/jquery.prettyPhoto.js b/js/jquery.prettyPhoto.js
@@ -2,10 +2,10 @@
 	Class: prettyPhoto
 	Use: Lightbox clone for jQuery
 	Author: Stephane Caron (http://www.no-margin-for-errors.com)
-	Version: 3.1.5
+	Version: 3.1.6
 ------------------------------------------------------------------------- */
 (function($) {
-	$.prettyPhoto = {version: '3.1.5'};
+	$.prettyPhoto = {version: '3.1.6'};
 
 	$.fn.prettyPhoto = function(pp_settings) {
 		pp_settings = jQuery.extend({
@@ -885,7 +885,7 @@
 	function getHashtag(){
 		var url = location.href;
 		hashtag = (url.indexOf('#prettyPhoto') !== -1) ? decodeURI(url.substring(url.indexOf('#prettyPhoto')+1,url.length)) : false;
-
+		hashtag = hashtag.replace(/<|>/g,'');
 		return hashtag;
 	};