\r
var mailto = "";\r
var date = new Date(Date.parse(msg.date));\r
- if(msg.name != $system_name)\r
+ var name = util.htmlspecialchars(msg.name);\r
+ if(name != $system_name)\r
{\r
- color = $names[msg.name].color;\r
- $names[msg.name].time = date.getTime();\r
+ color = $names[name].color;\r
+ $names[name].time = date.getTime();\r
namepart = $("<a/>")\r
- .attr("href",GetNameLink(msg.name))\r
+ .attr("href",GetNameLink(name))\r
.attr("target","_blank")\r
.css("color",color)\r
- .text(util.htmlspecialchars(msg.name));\r
+ .text(name);\r
}else{\r
- namepart = $("<span/>").append(msg.name);\r
+ namepart = $("<span/>").append(name);\r
}\r
if(msg.ip != "")\r
namepart.append("@" + msg.ip);\r