MOBILE-1047 panels: Prevent to execute inline javascript

moodlehq · May 29, 2015 · 9a9608e · 9a9608e
1 parent 75aa69a
commit 9a9608e
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/mm.panels.js b/lib/mm.panels.js
@@ -86,8 +86,8 @@ MM.panels = {
 				html = '<div class="header-sub"><h2 id="tablet-page-title"></h2></div>' + html;
 			}
 		}
+		$('#panel-' + position).html($.parseHTML(html));
 
-		$('#panel-' + position).html(html);
 		// For Android, we open external links in a system browser. _blank -> external browser
 		MM.handleExternalLinks('#panel-'+position+'  a[target="_blank"]');
 		// external -> External resources to the app