[Pkg-owncloud-commits] [owncloud] 369/394: Sanitize groupname

[David Prévot]

This is an automated email from the git hooks/post-receive script.

taffit pushed a commit to annotated tag v4.5.10
in repository owncloud.

commit 4cff6df66b27f7c1d7e84cff590deb04229ad056
Author: Lukas Reschke <lukas at statuscode.ch>
Date:   Mon Mar 4 13:09:01 2013 +0100

    Sanitize groupname
    
    Backport to stable45 of #2060
---
 settings/js/users.js |    6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/settings/js/users.js b/settings/js/users.js
index 9f998ae..bb3e84d 100644
--- a/settings/js/users.js
+++ b/settings/js/users.js
@@ -79,9 +79,9 @@ var UserList={
 		}
 		var allGroups = String($('#content table').attr('data-groups')).split(', ');
 		$.each(allGroups, function(i, group) {
-			groupsSelect.append($('<option value="'+group+'">'+group+'</option>'));
+			groupsSelect.append($('<option value="'+escapeHTML(group)+'">'+escapeHTML(group)+'</option>'));
 			if (typeof subadminSelect !== 'undefined' && group != 'admin') {
-				subadminSelect.append($('<option value="'+group+'">'+group+'</option>'));
+				subadminSelect.append($('<option value="'+escapeHTML(group)+'">'+escapeHTML(group)+'</option>'));
 			}
 		});
 		tr.find('td.groups').append(groupsSelect);
@@ -221,7 +221,7 @@ var UserList={
 			var addSubAdmin = function(group) {
 				$('select[multiple]').each(function(index, element) {
 					if ($(element).find('option[value="'+group +'"]').length == 0) {
-						$(element).append('<option value="'+group+'">'+group+'</option>');
+						$(element).append('<option value="'+escapeHTML(group)+'">'+escapeHTML(group)+'</option>');
 					}
 				})
 			};

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-owncloud/owncloud.git