Add missing sanitization for HTML exporting of bookmarks.

This commit is contained in:
wolfbeast 2017-11-23 09:02:55 +01:00 committed by Roy Tam
commit 39acad1d90

View file

@ -1145,7 +1145,7 @@ BookmarkExporter.prototype = {
if (aItem.charset)
this._writeAttribute("LAST_CHARSET", escapeHtmlEntities(aItem.charset));
if (aItem.tags)
this._writeAttribute("TAGS", aItem.tags);
this._writeAttribute("TAGS", escapeHtmlEntities(aItem.tags));
this._writeLine(">" + escapeHtmlEntities(aItem.title) + "</A>");
this._writeDescription(aItem, aIndent);
},