Fix not escape string

8 years ago · 1203d7e780
parent 38aad94dac
commit 1203d7e780
1 changed files with 1 additions and 1 deletions
--- a/main/document/document.php
+++ b/main/document/document.php
@ -738,7 +738,7 @@ $tool_visibility = $tool_row['visibility'];*/

 $htmlHeadXtra[] = '<script>
 function confirmation (name) {
-    if (confirm(" '.get_lang('AreYouSureToDeleteJS').' "+ name + " ?")) {
+    if (confirm(" '.addslashes(get_lang('AreYouSureToDeleteJS')).' "+ name + " ?")) {
        return true;
    } else {
        return false;