summaryrefslogtreecommitdiff
path: root/js/tt-rss.js
diff options
context:
space:
mode:
authorAnders Kaseorg <[email protected]>2017-01-20 13:13:31 -0500
committerAnders Kaseorg <[email protected]>2017-01-21 16:52:27 -0500
commit88946d331aad96ecbdf9d570853121e5a7eb07ab (patch)
tree7e9f21a5e61e030352a81711776731d514707bd1 /js/tt-rss.js
parent0047f2578f126cb6de2eed928e86ed7340c3854d (diff)
Replace all setTimeout strings with functions
This fixes a cross-site scripting vulnerability. Signed-off-by: Anders Kaseorg <[email protected]>
Diffstat (limited to 'js/tt-rss.js')
-rw-r--r--js/tt-rss.js6
1 files changed, 3 insertions, 3 deletions
diff --git a/js/tt-rss.js b/js/tt-rss.js
index 26982608e..20e0fc5a9 100644
--- a/js/tt-rss.js
+++ b/js/tt-rss.js
@@ -159,7 +159,7 @@ function viewCurrentFeed(method) {
function timeout() {
if (getInitParam("bw_limit") != "1") {
request_counters();
- setTimeout("timeout()", 60*1000);
+ setTimeout(timeout, 60*1000);
}
}
@@ -654,7 +654,7 @@ function init_second_stage() {
if (getInitParam("simple_update")) {
console.log("scheduling simple feed updater...");
- window.setTimeout("update_random_feed()", 30*1000);
+ window.setTimeout(update_random_feed, 30*1000);
}
} catch (e) {
@@ -1130,7 +1130,7 @@ function update_random_feed() {
parameters: "op=rpc&method=updateRandomFeed",
onComplete: function(transport) {
handle_rpc_json(transport, true);
- window.setTimeout("update_random_feed()", 30*1000);
+ window.setTimeout(update_random_feed, 30*1000);
} });
} catch (e) {