From c93f3cd8259b39d412629d7d42a9f8c575d4ae11 Mon Sep 17 00:00:00 2001
From: Koda <koda.masaru3@gmail.com>
Date: Thu, 14 Sep 2017 04:17:19 +0900
Subject: [PATCH] #845 escape link url for bookmark type

---
 src/main/webapp/js/common.js             | 11 +++++++++++
 src/main/webapp/js/template-item-view.js |  2 +-
 2 files changed, 12 insertions(+), 1 deletion(-)

diff --git a/src/main/webapp/js/common.js b/src/main/webapp/js/common.js
index 971dbbf55..925488e43 100644
--- a/src/main/webapp/js/common.js
+++ b/src/main/webapp/js/common.js
@@ -113,6 +113,17 @@ function unescapeHTML(str) {
     return div.textContent || div.innerText;
 };
 
+function escapeLink(url) {
+    if (url.toLowerCase().indexOf('javascript:') != -1) {
+        var conv = '';
+        conv += url.substring(0, url.toLowerCase().indexOf('javascript:'));
+        conv += encodeURIComponent(url.substring(url.toLowerCase().indexOf('javascript:')));
+        return conv;
+    } else {
+        return url;
+    }
+}
+
 var handleErrorResponse = function(xhr, textStatus, error) {
     console.log(error);
     console.log(xhr);
diff --git a/src/main/webapp/js/template-item-view.js b/src/main/webapp/js/template-item-view.js
index d121ba922..f19eb31d9 100644
--- a/src/main/webapp/js/template-item-view.js
+++ b/src/main/webapp/js/template-item-view.js
@@ -21,7 +21,7 @@ $(document).ready(function() {
             url = item.itemValue;
         }
         tag += '<h4>' + item.itemName + ': ';
-        tag += '<a href="' + url + '" target="_blank" >' + url + '</a></h4>';
+        tag += '<a href="' + escapeLink(url) + '" target="_blank" >' + url + '</a></h4>';
         return tag;
     };
     var createRadioItem = function(item) {