From f1809b8f9c3e640cdfdb75e9f200052734e331a8 Mon Sep 17 00:00:00 2001
From: Keegan McAllister <keegan@humbughq.com>
Date: Thu, 1 Nov 2012 14:24:51 -0400
Subject: [PATCH] add_display_time: Note unescaped variable

(imported from commit 17d683e2bf0e5eabfb1cb2cdb6a1db18d140b5c9)
---
 zephyr/static/js/zephyr.js | 1 +
 1 file changed, 1 insertion(+)

diff --git a/zephyr/static/js/zephyr.js b/zephyr/static/js/zephyr.js
index cc2a4f9dda..d4735e340f 100644
--- a/zephyr/static/js/zephyr.js
+++ b/zephyr/static/js/zephyr.js
@@ -241,6 +241,7 @@ function add_display_time(message, prev) {
         }
     }
 
+    // NB: timestr is HTML, inserted into the document without escaping.
     if (include_date) {
         message.timestr = time.toString("MMM dd") + "&nbsp;&nbsp;" +
             time.toString("HH:mm");