Skip to content

Commit 59a8d3f

Browse files
committedSep 21, 2021
e835ddc5b800c47f7e9e32a91cc522f8ca7ced5c Fix: If an array was passed to the HTML escape entities function it would not have its contents escaped
Many thanks to Alessio Della Libera of Snyk for finding and reporting this. Sync to source repo @e835ddc5b800c47f7e9e32a91cc522f8ca7ced5c
1 parent 7e67f10 commit 59a8d3f

File tree

3 files changed

+11
-7
lines changed

3 files changed

+11
-7
lines changed
 

‎datatables.json

+1-1
Original file line numberDiff line numberDiff line change
@@ -9,5 +9,5 @@
99
],
1010
"src-repo": "http://github.com/DataTables/DataTablesSrc",
1111
"last-tag": "1.11.2",
12-
"last-sync": "ea607c6e51e76d13efc341b5d41f5082a33b56e0"
12+
"last-sync": "e835ddc5b800c47f7e9e32a91cc522f8ca7ced5c"
1313
}

‎js/jquery.dataTables.js

+4
Original file line numberDiff line numberDiff line change
@@ -15064,6 +15064,10 @@
1506415064
*/
1506515065

1506615066
var __htmlEscapeEntities = function ( d ) {
15067+
if (Array.isArray(d)) {
15068+
d = d.join(',');
15069+
}
15070+
1506715071
return typeof d === 'string' ?
1506815072
d
1506915073
.replace(/&/g, '&')

‎js/jquery.dataTables.min.js

+6-6
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)
Please sign in to comment.