From 30143b3262e3774d8618181cfae3100795fcbae2 Mon Sep 17 00:00:00 2001
From: Dylan Hardison <dylan@mozilla.com>
Date: Tue, 8 Mar 2016 09:32:41 -0500
Subject: Bug 1252554 - Avoid possibility of XSS in release tracking report

---
 .../BMO/template/en/default/pages/release_tracking_report.html.tmpl | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

(limited to 'extensions/BMO')

diff --git a/extensions/BMO/template/en/default/pages/release_tracking_report.html.tmpl b/extensions/BMO/template/en/default/pages/release_tracking_report.html.tmpl
index 25188ed41..79587205c 100644
--- a/extensions/BMO/template/en/default/pages/release_tracking_report.html.tmpl
+++ b/extensions/BMO/template/en/default/pages/release_tracking_report.html.tmpl
@@ -19,9 +19,9 @@
 </noscript>
 
 <script>
-var flags_data = [% flags_json FILTER none %];
-var products_data = [% products_json FILTER none %];
-var fields_data = [% fields_json FILTER none %];
+var flags_data = $.parseJSON("[% flags_json FILTER js %]");
+var products_data = $.parseJSON("[% products_json FILTER js %]");
+var fields_data = $.parseJSON("[% fields_json FILTER js %]");
 var default_query = '[% default_query FILTER js %]';
 </script>
 
-- 
cgit v1.2.3-24-g4f1b