Merge pull request #107 from truenorth/md-loader-xss-fix

Fixed possible XSS bug in md-loader style binding
mike-north · May 17, 2015 · 4d68a90 · 4d68a90
2 parents 96961f6 + 611cbda
commit 4d68a90
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/addon/components/md-loader.js b/addon/components/md-loader.js
@@ -28,7 +28,7 @@ export default Ember.Component.extend({
   barStyle: computed('mode', 'percent', {
     get() {
       if (this.get('mode') === 'determinate') {
-        return `width: ${this.get('percent')}%`;
+        return Ember.String.htmlSafe(`width: ${parseInt(this.get('percent'), 10)}%`).string;
       }
       else {
         return null;