diff options
| author | Wu Cheng-Han | 2016-11-26 22:55:31 +0800 |
|---|---|---|
| committer | Wu Cheng-Han | 2016-11-26 22:55:31 +0800 |
| commit | 9d4ede4cffae47b9fd81ffbd0f2edff47c29e224 (patch) | |
| tree | 93f56b484e527a0e8b0a95c768925876e70d8f1f /public/views/ga.ejs | |
| parent | b43e63dd21584c75ab7e0be6fe6331857f09c026 (diff) | |
Fix possible XSS in yaml-metadata and turn using ejs escape syntax than external lib [Security Issue]
Diffstat (limited to 'public/views/ga.ejs')
| -rw-r--r-- | public/views/ga.ejs | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/public/views/ga.ejs b/public/views/ga.ejs index 180832d1..66d4acd9 100644 --- a/public/views/ga.ejs +++ b/public/views/ga.ejs @@ -12,7 +12,7 @@ m.parentNode.insertBefore(a, m) })(window, document, 'script', '//www.google-analytics.com/analytics.js', 'ga'); -ga('create', '<%- GA %>', 'auto'); +ga('create', '<%= GA %>', 'auto'); ga('send', 'pageview'); </script> <% } %>
\ No newline at end of file |