Merge branch 'settimeout-strings' into 'master'

Replace all setTimeout strings with functions

This fixes a cross-site scripting vulnerability.

See merge request !41

1 files changed, 2 insertions, 2 deletions

diff --git a/js/prefs.js b/js/prefs.js
index 69e779d45..23d43f366 100755
--- a/js/prefs.js
+++ b/js/prefs.js
@@ -901,10 +901,10 @@ function init_second_stage() {
 		if (method == 'editFeed') {
 			var param = getURLParam('methodparam');
 
-			window.setTimeout('editFeed(' + param + ')', 100);
+			window.setTimeout(function() { editFeed(param) }, 100);
 		}
 
-		setTimeout("hotkey_prefix_timeout()", 5*1000);
+		setTimeout(hotkey_prefix_timeout, 5*1000);
 
 	} catch (e) {
 		exception_error("init_second_stage", e);