[Pkg-owncloud-commits] [owncloud] 01/02: Escape file name in filepicker

[David Prévot]

This is an automated email from the git hooks/post-receive script.

taffit pushed a commit to annotated tag v4.0.16
in repository owncloud.

commit 17b44bfacbb003efd1e4976337d5778476f590d3
Author: Thomas Tanghus <thomas at tanghus.net>
Date:   Thu May 16 13:09:37 2013 +0200

    Escape file name in filepicker
---
 core/js/oc-dialogs.js |    2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/core/js/oc-dialogs.js b/core/js/oc-dialogs.js
index 0fa4169..fea41b1 100644
--- a/core/js/oc-dialogs.js
+++ b/core/js/oc-dialogs.js
@@ -216,7 +216,7 @@ OCdialogs = {
 		var entry_template = '<div onclick="javascript:OC.dialogs.handlePickerClick(this, \'*ENTRYNAME*\',\''+dialog_content_id+'\')" data="*ENTRYTYPE*"><img src="*MIMETYPEICON*" style="margin-right:1em;"><span id="filename">*NAME*</span><div style="float:right;margin-right:1em;">*LASTMODDATE*</div></div>';
 		var names = '';
 		for (var a in r.data) {
-			names += entry_template.replace('*LASTMODDATE*', OC.mtime2date(r.data[a].mtime)).replace('*NAME*', r.data[a].name).replace('*MIMETYPEICON*', r.data[a].mimetype_icon).replace('*ENTRYNAME*', r.data[a].name).replace('*ENTRYTYPE*', r.data[a].type);
+			names += entry_template.replace('*LASTMODDATE*', OC.mtime2date(r.data[a].mtime)).replace('*NAME*', escapeHTML(r.data[a].name)).replace('*MIMETYPEICON*', r.data[a].mimetype_icon).replace('*ENTRYNAME*', escapeHTML(r.data[a].name)).replace('*ENTRYTYPE*', r.data[a].type);
 		}
 		$(dialog_content_id + ' #filelist').html(names);
 		$(dialog_content_id + ' .filepicker_loader').css('visibility', 'hidden');

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-owncloud/owncloud.git