From: miker <miker@dcc99617-32d9-48b4-a31d-7c20da2025e4>
Date: Fri, 15 May 2009 15:25:46 +0000 (+0000)
Subject: avoid regex-izing user supplied strings
X-Git-Url: https://old-git.evergreen-ils.org/?a=commitdiff_plain;h=f7fa8bb1577e6f9ff52f04a819e5c71a7c1c0a58;p=Evergreen.git

avoid regex-izing user supplied strings

git-svn-id: svn://svn.open-ils.org/ILS/branches/rel_1_4@13169 dcc99617-32d9-48b4-a31d-7c20da2025e4
---

diff --git a/Open-ILS/web/opac/skin/default/js/myopac.js b/Open-ILS/web/opac/skin/default/js/myopac.js
index 73be5c3182..b3f1f3d22a 100644
--- a/Open-ILS/web/opac/skin/default/js/myopac.js
+++ b/Open-ILS/web/opac/skin/default/js/myopac.js
@@ -783,7 +783,7 @@ function _myOPACSummaryShowUer(r) {
     }
 
 	var iv1 = user.ident_value()+'';
-	if (iv1.length > 4) iv1 = iv1.replace(new RegExp(iv1.substring(0,iv1.length - 4)), '***********');
+    if (iv1.length > 4 && iv1.match(/\d{4}/)) iv1 = iv1.substring(0,4) + '***********';
 
 	appendClear($('myopac_summary_prefix'),text(user.prefix()));
 	appendClear($('myopac_summary_first'),text(user.first_given_name()));