Merge pull request #309 from Faldon/master

Changed the creation of the update notification link
nextcloud · Jul 5, 2016 · 3ffe424 · 3ffe424
2 parents 0481a3e + cf7afab
commit 3ffe424
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/apps/updatenotification/js/notification.js b/apps/updatenotification/js/notification.js
@@ -18,7 +18,7 @@ $(document).ready(function(){
 		version = oc_updateState.updateVersion,
 		docLink = oc_updateState.updateLink,
 		text = t('core', '{version} is available. Get more information on how to update.', {version: version}),
-		element = $('<a>').attr('href', docLink).attr('target','_blank').text(text);
+		element = $('<a href="'+escapeHTML(docLink)+'" target="_blank">'+escapeHTML(text)+'</a>');
 
 	OC.Notification.showTemporary(
 		element,