File CVE-2016-7103.patch of Package python-XStatic-jquery-ui
--- XStatic-jquery-ui-1.11.0.1/xstatic/pkg/jquery_ui/data/jquery-ui.js
+++ XStatic-jquery-ui-1.11.0.1/xstatic/pkg/jquery_ui/data/jquery-ui.js
@@ -8161,7 +8161,7 @@
// dialog in IE (#9312)
this.uiDialogTitlebarClose = $( "<button type='button'></button>" )
.button({
- label: this.options.closeText,
+ label: $( "<a>" ).text( this.options.closeText ).html(),
icons: {
primary: "ui-icon-closethick"
},
@@ -8441,7 +8441,7 @@
if ( key === "closeText" ) {
this.uiDialogTitlebarClose.button({
// Ensure that we always pass a string
- label: "" + value
+ label: $( "<a>" ).text( "" + this.options.closeText ).html()
});
}