diff --git a/intercept.py b/intercept.py index 797c21e..4c4195e 100755 --- a/intercept.py +++ b/intercept.py @@ -2617,10 +2617,13 @@ HTML_TEMPLATE = ''' function escapeAttr(text) { // Escape for use in HTML attributes (especially onclick handlers) if (text === null || text === undefined) return ''; - return String(text).replace(/[&'"<>\\]/g, c => ({ - '&': '&', "'": ''', '"': '"', - '<': '<', '>': '>', '\\': '\\\\' - })[c]); + var s = String(text); + s = s.replace(/&/g, '&'); + s = s.replace(/'/g, '''); + s = s.replace(/"/g, '"'); + s = s.replace(//g, '>'); + return s; } function isValidMac(mac) {