Unescaped player names in players table

Issue #19 resolved
dreadnaut created an issue

I was trying to dismiss a player whose name contains an apostrophe, and discovered that it breaks the Javascript click handler.

This is the code in the page, where the name should be escaped

<span [...] onclick="dismiss_player_prompt( 225, 'Monpo L'Illandese', 1 ); return false;" [...] >
  Dismiss
</span>

Comments (3)

  1. Log in to comment