[FIX] security problem in im

bzr revid: nicolas.vanhoren@openerp.com-20130911163452-jumg8wahlzof4a6l

diff --git a/addons/im/static/src/js/im_common.js b/addons/im/static/src/js/im_common.js
index e0692ed..43ffdd9 100644 (file)
--- a/addons/im/static/src/js/im_common.js
+++ b/addons/im/static/src/js/im_common.js
@@ -522,7 +522,7 @@ function declare($, _, openerp) {
             var url = _.escape(result[0]);
             txt += '<a href="' + url + '">' + url + '</a>';
         }
-        txt += str.slice(last, str.length);
+        txt += _.escape(str.slice(last, str.length));
         return txt;
     };