From 19ae6db3080af8f71b3a34f16ab6f3a4b66ffc8b Mon Sep 17 00:00:00 2001
From: DennisSchiefer <shiin@gmx.de>
Date: Tue, 15 May 2012 13:47:36 +0100
Subject: [PATCH] made timestamp secure against injections

---
 WebContent/gui/OSRM.MainGUI.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/WebContent/gui/OSRM.MainGUI.js b/WebContent/gui/OSRM.MainGUI.js
index 7d5a91ef6..c2b28afb3 100644
--- a/WebContent/gui/OSRM.MainGUI.js
+++ b/WebContent/gui/OSRM.MainGUI.js
@@ -108,7 +108,7 @@ setDataTimestamp: function(response) {
 	if(!response)
 		return;
 	
-	OSRM.G.data_timestamp = response.timestamp;
+	OSRM.G.data_timestamp = response.timestamp.slice(0,25).replace(/<\/?[^>]+(>|$)/g ,"");	// discard tags
 	document.getElementById('gui-data-timestamp').innerHTML = OSRM.loc("GUI_DATA_TIMESTAMP")+": " + OSRM.G.data_timestamp;
 }