From cf74a17e34f66ecdeb092f7b020bed95821a2492 Mon Sep 17 00:00:00 2001
From: Frédéric Buclin <LpSolit@gmail.com>
Date: Wed, 26 Mar 2014 20:10:07 +0100
Subject: Bug 978070: Do not use document.write() to insert HTML code
 r/a=justdave

---
 template/en/default/global/code-error.html.tmpl | 12 +++---------
 1 file changed, 3 insertions(+), 9 deletions(-)

(limited to 'template/en/default/global')

diff --git a/template/en/default/global/code-error.html.tmpl b/template/en/default/global/code-error.html.tmpl
index 8a0b459b3..1c3422fa8 100644
--- a/template/en/default/global/code-error.html.tmpl
+++ b/template/en/default/global/code-error.html.tmpl
@@ -430,15 +430,9 @@
   with details of what you were doing at the time this message appeared.
 </p>
 
-<samp>
-  <script type="text/javascript"> <!--
-    document.write("<p>URL: " +
-                    document.location.href.replace(/&/g,"&amp;")
-                                          .replace(/</g,"&lt;")
-                                          .replace(/>/g,"&gt;") + "</p>");
-  // -->
-  </script>
-</samp>
+<p>
+  <samp>URL: [% Bugzilla.cgi.self_url FILTER html %]</samp>
+</p>
 
 <div id="error_msg" class="throw_error">
   [% error_message FILTER none %]
-- 
cgit v1.2.3-24-g4f1b