DataTables/.datatables-commit-sync at b7c671444d6e24d9a7168ec58d0c2780cf95914a - DataTables - Rooty - Git Service

rooty/DataTables

mirror of https://github.com/DataTables/DataTables.git synced 2025-04-05 22:57:36 +02:00

Allan Jardine b7c671444d Fix: The number rendering helper will now automatically escape HTML entities to help prevent possible XSS attacks if using a number renderer.

Rational for this is that the number renderer expects a number
input, not HTML, but if non-numeric input is given the value is just
returned (now escaped) - for example an empty string.

2016-01-07 15:24:53 +00:00

2 lines

41 B

Plaintext

Raw Blame History

d6aad5f99d5ff197e189beb6d108df027e47f21e