summaryrefslogtreecommitdiffstats
path: root/toolkit
diff options
context:
space:
mode:
authorwolfbeast <mcwerewolf@gmail.com>2017-11-23 09:02:55 +0100
committerwolfbeast <mcwerewolf@gmail.com>2018-02-08 21:14:22 +0100
commit9cd7b5a4a6f5d52326ba7bfbf9467853a1e73842 (patch)
tree6036a763e3b865255ee788cbc0d777a023dff512 /toolkit
parenta2e0f637b2f614440219993dd425cead09945b9b (diff)
downloadUXP-9cd7b5a4a6f5d52326ba7bfbf9467853a1e73842.tar
UXP-9cd7b5a4a6f5d52326ba7bfbf9467853a1e73842.tar.gz
UXP-9cd7b5a4a6f5d52326ba7bfbf9467853a1e73842.tar.lz
UXP-9cd7b5a4a6f5d52326ba7bfbf9467853a1e73842.tar.xz
UXP-9cd7b5a4a6f5d52326ba7bfbf9467853a1e73842.zip
Add missing sanitization for HTML exporting of bookmarks.
Diffstat (limited to 'toolkit')
-rw-r--r--toolkit/components/places/BookmarkHTMLUtils.jsm2
1 files changed, 1 insertions, 1 deletions
diff --git a/toolkit/components/places/BookmarkHTMLUtils.jsm b/toolkit/components/places/BookmarkHTMLUtils.jsm
index a009a5e7c..2285aae6e 100644
--- a/toolkit/components/places/BookmarkHTMLUtils.jsm
+++ b/toolkit/components/places/BookmarkHTMLUtils.jsm
@@ -1145,7 +1145,7 @@ BookmarkExporter.prototype = {
if (aItem.charset)
this._writeAttribute("LAST_CHARSET", escapeHtmlEntities(aItem.charset));
if (aItem.tags)
- this._writeAttribute("TAGS", aItem.tags);
+ this._writeAttribute("TAGS", escapeHtmlEntities(aItem.tags));
this._writeLine(">" + escapeHtmlEntities(aItem.title) + "</A>");
this._writeDescription(aItem, aIndent);
},