| Index: ui/base/webui/jstemplate_builder.cc
|
| diff --git a/ui/base/webui/jstemplate_builder.cc b/ui/base/webui/jstemplate_builder.cc
|
| index 3e9d4110ce9f82624a2cae4e9f9d3214eecd8cd5..95e3d35cc4dfb98a9dd636d4d1bc0cbc95cf6793 100644
|
| --- a/ui/base/webui/jstemplate_builder.cc
|
| +++ b/ui/base/webui/jstemplate_builder.cc
|
| @@ -27,7 +27,7 @@ void AppendJsonHtml(const base::DictionaryValue* json, std::string* output) {
|
|
|
| // </ confuses the HTML parser because it could be a </script> tag. So we
|
| // replace </ with <\/. The extra \ will be ignored by the JS engine.
|
| - base::ReplaceSubstringsAfterOffset(&javascript_string, 0, "</", "<\\/");
|
| + base::ReplaceSubstringsAfterOffset(&javascript_string, 0, "/script", "/scr\"+\"ipt");
|
|
|
| output->append("<script>");
|
| output->append(javascript_string);
|
|
|