From 87309601ce86dff05b9beac2eeb6a7f5c5af479c Mon Sep 17 00:00:00 2001 From: Julian Lam <julian.lam@gmail.com> Date: Thu, 21 Nov 2013 22:09:40 -0500 Subject: [PATCH] closed #533 --- src/routes/plugins.js | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/src/routes/plugins.js b/src/routes/plugins.js index d4243426ed..8736c51519 100644 --- a/src/routes/plugins.js +++ b/src/routes/plugins.js @@ -3,6 +3,7 @@ var nconf = require('nconf'), path = require('path'), fs = require('fs'), + validator = require('validator'), Plugins = require('../plugins'), PluginRoutes = function(app) { @@ -12,7 +13,7 @@ var nconf = require('nconf'), if (typeof returnData === 'object') { res.json(200, returnData); } else { - res.send(200, returnData); + res.send(200, validator.sanitize(returnData).escape()); } }); });