From bfca34155afab12a75524de4fe664ff20808ec86 Mon Sep 17 00:00:00 2001
From: Kristian Lyngstol <kristian@bohemians.org>
Date: Wed, 18 May 2016 22:46:52 +0200
Subject: Disable IE support and HTML-injection

---
 web/js/nms-info-box.js | 8 ++++----
 web/js/nms-oplog.js    | 4 ++--
 2 files changed, 6 insertions(+), 6 deletions(-)

(limited to 'web/js')

diff --git a/web/js/nms-info-box.js b/web/js/nms-info-box.js
index bad2960..b4b8c4c 100644
--- a/web/js/nms-info-box.js
+++ b/web/js/nms-info-box.js
@@ -45,7 +45,7 @@ var nmsInfoBox = nmsInfoBox || {
 		'views': {
 			'initial': {
 				'name': 'Switch summary',
-				'panels': ['switchComments','switchSummary']
+				'panels': ['switchSummary','switchComments']
 			},
 			'details': {
 				'name': 'Switch details',
@@ -294,7 +294,7 @@ var windowHandler = function () {
 		this.unloadWindow();
 		this.argument = argument;
 		this._window = this.windowTypes[windowName];
-		this.showTitle(this._window.title);
+		this.showTitle(this._window.title + " " + (argument ? argument : ""));
 		this.showView();
 		this.show();
 	};
@@ -849,8 +849,8 @@ var switchCommentsPanel = function () {
 		tr.className = 
 		td1 = tr.insertCell(0);
 		td2 = tr.insertCell(1);
-		td1.innerHTML = logs[v]['timestamp'];
-		td2.innerHTML = "[" + logs[v]['username'] + "] " + logs[v]['log'];
+		td1.textContent = logs[v]['timestamp'];
+		td2.textContent = "[" + logs[v]['username'] + "] " + logs[v]['log'];
 	}
 	domObj.appendChild(table);
 
diff --git a/web/js/nms-oplog.js b/web/js/nms-oplog.js
index 08291f4..cf06007 100644
--- a/web/js/nms-oplog.js
+++ b/web/js/nms-oplog.js
@@ -59,8 +59,8 @@ nmsOplog._updateComments = function(limit,prefix,timefield) {
 		tr = table.insertRow(-1);
 		td1 = tr.insertCell(0);
 		td2 = tr.insertCell(1);
-		td1.innerHTML = nmsData['oplog']['oplog'][v][timefield];
-		td2.innerHTML = "[" + nmsData['oplog']['oplog'][v]['username'] + "] " + nmsData['oplog']['oplog'][v]['log'];
+		td1.textContent = nmsData['oplog']['oplog'][v][timefield];
+		td2.textContent = "[" + nmsData['oplog']['oplog'][v]['username'] + "] " + nmsData['oplog']['oplog'][v]['log'];
 		if (++i == limit)
 			break;
 	}
-- 
cgit v1.2.3