Ensure warnings are escaped (#6279)

Signed-off-by: David Leadbeater <dgl@dgl.cx>
This commit is contained in:
David Leadbeater 2019-11-06 07:55:28 +00:00 committed by Brian Brazil
parent 431844f0a7
commit 129dbdaf74

View file

@ -514,7 +514,7 @@ Prometheus.Graph.prototype.submitQuery = function() {
}
if ("warnings" in json && json.warnings.length > 0) {
self.showWarning(json.warnings.join('<br>'));
self.showWarning(json.warnings.map(escapeHTML).join('<br>'));
}
queryHistory.handleHistory(self);