Bug 1134743: javascript filter should escape uncode line and paragraph separators...

r=dylan,a=glob

diff --git a/Bugzilla/Template.pm b/Bugzilla/Template.pm
index 066f9dc3056146332a04eb970b1065ef32b845b5..3f3d5f399374065499b13bc5fddf11df63a6b859 100644 (file)
--- a/Bugzilla/Template.pm
+++ b/Bugzilla/Template.pm
@@ -766,6 +766,8 @@ sub create {
                 $var =~ s/([\\\'\"\/])/\\$1/g;
                 $var =~ s/\n/\\n/g;
                 $var =~ s/\r/\\r/g;
+                $var =~ s/\x{2028}/\\u2028/g; # unicode line separator
+                $var =~ s/\x{2029}/\\u2029/g; # unicode paragraph separator
                 $var =~ s/\@/\\x40/g; # anti-spam for email addresses
                 $var =~ s/</\\x3c/g;
                 $var =~ s/>/\\x3e/g;