From 3380e3b160279d7b7b7167301528a2e1c2f2c09d Mon Sep 17 00:00:00 2001
From: Will Long <will@kerasai.com>
Date: Thu, 24 May 2018 10:37:50 -0600
Subject: [PATCH] Added comment describing obfuscation

---
 templates/CRM/common/openFlashChart.tpl | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/templates/CRM/common/openFlashChart.tpl b/templates/CRM/common/openFlashChart.tpl
index a969a5d451..37b5232c51 100644
--- a/templates/CRM/common/openFlashChart.tpl
+++ b/templates/CRM/common/openFlashChart.tpl
@@ -45,7 +45,8 @@
              image: function(src) { return "<img src='data:image/png;base64," + $('#'+src)[0].get_img_binary() + "' />"},
              popup: function(src) {
              var img_win = window.open('', 'Save Chart as Image');
-             var html = 'html', head = 'head', body = 'body';             
+             // HTML, HEAD, and BODY tags in JS literals obfuscated to avoid being parsed as DOM elements.
+             var html = 'html', head = 'head', body = 'body';
            img_win.document.write('<' + html + '><' + head + '><title>Save Chart as Image<\/title><\/' + head + '><' + body + '>' + OFC.jquery.image(src) + ' <\/' + body + '><\/' + html + '>');
            img_win.document.close();
                        }
-- 
2.25.1