diff options
| author | Anders Kaseorg <[email protected]> | 2017-01-20 13:13:31 -0500 |
|---|---|---|
| committer | Anders Kaseorg <[email protected]> | 2017-01-21 16:52:27 -0500 |
| commit | 88946d331aad96ecbdf9d570853121e5a7eb07ab (patch) | |
| tree | 7e9f21a5e61e030352a81711776731d514707bd1 /js/viewfeed.js | |
| parent | 0047f2578f126cb6de2eed928e86ed7340c3854d (diff) | |
Replace all setTimeout strings with functions
This fixes a cross-site scripting vulnerability.
Signed-off-by: Anders Kaseorg <[email protected]>
Diffstat (limited to 'js/viewfeed.js')
| -rwxr-xr-x | js/viewfeed.js | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/js/viewfeed.js b/js/viewfeed.js index feb397157..007728a10 100755 --- a/js/viewfeed.js +++ b/js/viewfeed.js @@ -2315,7 +2315,7 @@ function updateFloatingTitle(unread_only) { function catchupCurrentBatchIfNeeded() { if (catchup_id_batch.length > 0) { window.clearTimeout(catchup_timeout_id); - catchup_timeout_id = window.setTimeout('catchupBatchedArticles()', 1000); + catchup_timeout_id = window.setTimeout(catchupBatchedArticles, 1000); if (catchup_id_batch.length >= 10) { catchupBatchedArticles(); |