escapehtml function implementation

princekhunt · Mar 12, 2024 · 7106a07 · 7106a07
1 parent 7e6c333
commit 7106a07
Show file tree

Hide file tree

Showing 2 changed files with 11 additions and 5 deletions.
diff --git a/assets/js/chat/Base.js b/assets/js/chat/Base.js
@@ -1,7 +1,12 @@
+function escapeHtml(text) {
+    return text.replace(/</g, "&lt;").replace(/>/g, "&gt;");
+}
+
 function getUserName(){
     //check if current page is waiting room without function
     if (window.location.href.indexOf("waiting-room") > -1) {
         name = 'user';
+        name = escapeHtml(name);
         name = name.replace(/\[/g, '\\[').replace(/\]/g, '\\]');
         var regex = new RegExp('[\\?&]' + name + '=([^&#]*)');
         var results = regex.exec(location.search);
@@ -139,8 +144,4 @@ $(document).ready(function() {
             }
         });
     })
-});
-
-function escapeHtml(text) {
-    return text.replace(/</g, "&lt;").replace(/>/g, "&gt;");
-}
+});
diff --git a/assets/js/chat/waiting_room.js b/assets/js/chat/waiting_room.js
@@ -1,5 +1,10 @@
+function escapeHtml(text) {
+    return text.replace(/</g, "&lt;").replace(/>/g, "&gt;");
+}
+
 $(document).ready(function(){
     function getUrlParameter(name) {
+        name = escapeHtml(name);
         name = name.replace(/\[/g, '\\[').replace(/\]/g, '\\]');
         var regex = new RegExp('[\\?&]' + name + '=([^&#]*)');
         var results = regex.exec(location.search);