From ecf6ab7acc51cbb53f0d5f7ea508141017feeae4 Mon Sep 17 00:00:00 2001
From: Nick Liu <deltik@gmx.com>
Date: Sat, 7 Aug 2021 18:50:14 +0200
Subject: [PATCH] =?UTF-8?q?show=5Femessage("ALERT",=20=E2=80=A6):=20JSON?=
 =?UTF-8?q?=20type=20enforcement=20for=20alert()=20usages?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 e107_handlers/message_handler.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/e107_handlers/message_handler.php b/e107_handlers/message_handler.php
index 46db919f3..cc1f7d1b3 100644
--- a/e107_handlers/message_handler.php
+++ b/e107_handlers/message_handler.php
@@ -1152,11 +1152,11 @@ $SYSTEM_DIRECTORY    = "e107_system/";</pre>
 
 		case "ALERT":
 			$message = isset($emessage[$message]) ? $emessage[$message] : $message;
-			echo "<noscript>$message</noscript><script type='text/javascript'>alert(\"".$tp->toJS($message)."\"); window.history.go(-1); </script>\n"; exit;
+			echo "<noscript>$message</noscript><script type='text/javascript'>alert(".json_encode($message)."); window.history.go(-1); </script>\n"; exit;
 			break;
 
 		case "P_ALERT":
-			echo "<script type='text/javascript'>alert(\"".$tp->toJS($message)."\"); </script>\n";
+			echo "<script type='text/javascript'>alert(".json_encode($message)."); </script>\n";
 			break;
 
 		case 'POPUP':