diff --git a/js/misc/jsParse.js b/js/misc/jsParse.js index 05ab42337..43e99cabc 100644 --- a/js/misc/jsParse.js +++ b/js/misc/jsParse.js @@ -217,7 +217,7 @@ function isUnsafeExpression(str) { prunedStr = prunedStr.replace(/[=!]==/g, ''); //replace === and !== with nothing prunedStr = prunedStr.replace(/[=<>!]=/g, ''); //replace ==, <=, >=, != with nothing - if (prunedStr.match(/=/)) { + if (prunedStr.match(/[=]/)) { return true; } else if (prunedStr.match(/;/)) { // If we contain a semicolon not inside of a quote/regex, assume we're unsafe as well