dinislage/PrestaShop
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update ajax-wishlist.js

Browse Source 
innerHtml can not execute javascript from "data". If someone modify php files returned from jquery function and includes a script, it's not executed.
This commit is contained in:
joseantgv
2013-11-11 16:58:52 +01:00
parent e2d8a33a81
commit 7523828a7a
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
modules/blockwishlist/js/ajax-wishlist.js
+3 -3
View File
@@ -58,7 +58,7 @@ function WishlistCart(id, action, id_product, id_product_attribute, quantity)
if($('#' + id).length != 0) if($('#' + id).length != 0)
{ {
$('#' + id).slideUp('normal'); $('#' + id).slideUp('normal');
document.getElementById(id).innerHTML = data; $('#' + id).html(data);
$('#' + id).slideDown('normal'); $('#' + id).slideDown('normal');
} }
} }
@@ -81,7 +81,7 @@ function WishlistChangeDefault(id, id_wishlist)
success: function(data) success: function(data)
{ {
$('#' + id).slideUp('normal'); $('#' + id).slideUp('normal');
document.getElementById(id).innerHTML = data; $('#' + id).html(data);
$('#' + id).slideDown('normal'); $('#' + id).slideDown('normal');
} }
}); });
@@ -147,7 +147,7 @@ function WishlistManage(id, id_wishlist)
success: function(data) success: function(data)
{ {
$('#' + id).hide(); $('#' + id).hide();
document.getElementById(id).innerHTML = data; $('#' + id).html(data);
$('#' + id).fadeIn('slow'); $('#' + id).fadeIn('slow');
} }
}); });