From f18f9426b0d4988d501f0a31e1aa304d7731638d Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Michal=20M=C4=9Bchura?= <michmech@lexiconista.com>
Date: Fri, 22 Dec 2023 12:27:08 +0100
Subject: [PATCH] =?UTF-8?q?html=20leabaithe=20a=20neodr=C3=BA?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 website/views/termbase-admin/editor.ejs    | 2 +-
 website/views/termbase-admin/navigator.ejs | 4 ++--
 website/views/termbase-config/editor.ejs   | 2 +-
 website/views/termbase-edit/navigator.ejs  | 4 ++--
 website/views/xnet/navigator.ejs           | 4 ++--
 5 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/website/views/termbase-admin/editor.ejs b/website/views/termbase-admin/editor.ejs
index 2321cfc..7dbd156 100644
--- a/website/views/termbase-admin/editor.ejs
+++ b/website/views/termbase-admin/editor.ejs
@@ -5,7 +5,7 @@
 		<title>Screenful Editor</title>
 		<script type="text/javascript">var rootPath="/../../../";</script>
     <script type="text/javascript">var metadataType="<%-metadataType%>";</script>
-		<script type="text/javascript">var termbaseConfigs=<%-JSON.stringify(termbaseConfigs)%>;</script>
+		<script type="text/javascript">var termbaseConfigs=<%-JSON.stringify(termbaseConfigs).replace(/</g, "&lt;")%>;</script>
 
 		<script type="text/javascript" src="../../../libs/jquery.js"></script>
 		<link type="text/css" rel="stylesheet" href="../../../libs/screenful/screenful-theme-green.css" />
diff --git a/website/views/termbase-admin/navigator.ejs b/website/views/termbase-admin/navigator.ejs
index 21d3d6a..ac71a7d 100644
--- a/website/views/termbase-admin/navigator.ejs
+++ b/website/views/termbase-admin/navigator.ejs
@@ -23,8 +23,8 @@
 		<script type="text/javascript" src="../../../libs/screenful/screenful-user.js"></script>
 		<link type="text/css" rel="stylesheet" href="../../../libs/screenful/screenful-user.css" />
 		<script type="text/javascript">
-		var termbaseConfigs=<%-JSON.stringify(termbaseConfigs)%>;
-		var termbaseMetadata=<%-JSON.stringify(termbaseMetadata)%>;
+		var termbaseConfigs=<%-JSON.stringify(termbaseConfigs).replace(/</g, "&lt;")%>;
+		var termbaseMetadata=<%-JSON.stringify(termbaseMetadata).replace(/</g, "&lt;")%>;
 		</script>
 		<script type="text/javascript">
 		Screenful.User.loggedin=<%=(user.loggedin ? "true" : "false")%>;
diff --git a/website/views/termbase-config/editor.ejs b/website/views/termbase-config/editor.ejs
index 73afbf4..11af43f 100644
--- a/website/views/termbase-config/editor.ejs
+++ b/website/views/termbase-config/editor.ejs
@@ -41,7 +41,7 @@
 
 		<script type="text/javascript">
 		uilangs=<%-JSON.stringify(uilangs)%>;
-		var termbaseConfigs=<%-JSON.stringify(termbaseConfigs)%>;
+		var termbaseConfigs=<%-JSON.stringify(termbaseConfigs).replace(/</g, "&lt;")%>;
 		var defaultAbc=<%-JSON.stringify(defaultAbc)%>;
 		var licences=<%-JSON.stringify(licences)%>;
 		</script>
diff --git a/website/views/termbase-edit/navigator.ejs b/website/views/termbase-edit/navigator.ejs
index c2a71e2..e11224f 100644
--- a/website/views/termbase-edit/navigator.ejs
+++ b/website/views/termbase-edit/navigator.ejs
@@ -26,8 +26,8 @@
 		<script type="text/javascript" src="../../libs/screenful/screenful-user.js"></script>
 		<link type="text/css" rel="stylesheet" href="../../libs/screenful/screenful-user.css" />
 		<script type="text/javascript">
-		var termbaseConfigs=<%-JSON.stringify(termbaseConfigs)%>;
-		var termbaseMetadata=<%-JSON.stringify(termbaseMetadata)%>;
+		var termbaseConfigs=<%-JSON.stringify(termbaseConfigs).replace(/</g, "&lt;")%>;
+		var termbaseMetadata=<%-JSON.stringify(termbaseMetadata).replace(/</g, "&lt;")%>;
 		</script>
 		<script type="text/javascript">
 		Screenful.User.loggedin=<%=(user.loggedin ? "true" : "false")%>;
diff --git a/website/views/xnet/navigator.ejs b/website/views/xnet/navigator.ejs
index 4c2b01c..0db9a0f 100644
--- a/website/views/xnet/navigator.ejs
+++ b/website/views/xnet/navigator.ejs
@@ -24,8 +24,8 @@
 		<script type="text/javascript" src="../../libs/screenful/screenful-user.js"></script>
 		<link type="text/css" rel="stylesheet" href="../../libs/screenful/screenful-user.css" />
 		<script type="text/javascript">
-		var termbaseConfigs=<%-JSON.stringify(termbaseConfigs)%>;
-		var termbaseMetadata=<%-JSON.stringify(termbaseMetadata)%>;
+		var termbaseConfigs=<%-JSON.stringify(termbaseConfigs).replace(/</g, "&lt;")%>;
+		var termbaseMetadata=<%-JSON.stringify(termbaseMetadata).replace(/</g, "&lt;")%>;
 		</script>
 		<script type="text/javascript">
 		Screenful.User.loggedin=<%=(user.loggedin ? "true" : "false")%>;