lib-common: CommonLog: Disable JavaScript escapes

kohlschutter · Dec 4, 2023 · 19c8ee7 · 19c8ee7
1 parent fac20d6
commit 19c8ee7
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/jacline-lib-common/src/main/jacline/log.patch.js b/jacline-lib-common/src/main/jacline/log.patch.js
@@ -3,6 +3,7 @@ goog.module("kohlschutter.log.Log$impl$patched");
 var CommonLog = goog.require("kohlschutter.log.Log$impl");
 
 function logTo(target, message, args) {
+    message = message.replaceAll("%", "%%"); // disallow JavaScript console escapes
     if (args.length == 0) {
         target(message);
         return;