R1:e8dd67b88c13
R1:e8dd67b88c13
Properly escape inline <script>
Test Plan:
Loaded Phabricator page, checked the source code. Also:
$c_uri = '//connect.facebook.net/en_US/all.js#xfbml=1&appId=';
echo CelerityStaticResourceResponse::renderInlineScript(
jsprintf(
'console.log(%s); // </script>
%s',
$c_uri,
"</script><b>x</b>"));
Reviewers: epriestley, btrahan
Reviewed By: epriestley
CC: aran, Korvin
Differential Revision: https://secure.phabricator.com/D5741
Test Plan:
Loaded Phabricator page, checked the source code. Also:
$c_uri = '//connect.facebook.net/en_US/all.js#xfbml=1&appId=';
echo CelerityStaticResourceResponse::renderInlineScript(
jsprintf(
'console.log(%s); // </script>
%s',
$c_uri,
"</script><b>x</b>"));
Reviewers: epriestley, btrahan
Reviewed By: epriestley
CC: aran, Korvin
Differential Revision: https://secure.phabricator.com/D5741
Repository: R1 hydra
Commit Date: Apr 20 2013