Index: lams_tool_wiki/web/includes/javascript/wikiCommon.js =================================================================== diff -u -r8179037dc958585c054547eb7de9be14c6aed233 -r31d297d14df060ae066a55e125b5025ed713d681 --- lams_tool_wiki/web/includes/javascript/wikiCommon.js (.../wikiCommon.js) (revision 8179037dc958585c054547eb7de9be14c6aed233) +++ lams_tool_wiki/web/includes/javascript/wikiCommon.js (.../wikiCommon.js) (revision 31d297d14df060ae066a55e125b5025ed713d681) @@ -88,3 +88,14 @@ wikiListImage.src = webUrl + "/images/tree_open.gif"; } } + +// LDEV-2824 Replace "javascript" with another word before posting so browser does not detect it as XSS attack +function replaceJavascriptToken() +{ + for (var instanceId in CKEDITOR.instances){ + var instance = CKEDITOR.instances[instanceId]; + var data = instance.getData(); + var encodedData = data.replace(/javascript/g,"JAVASCRIPTREPLACE"); + instance.setData(encodedData); + } +}