[Pkg-owncloud-commits] [owncloud] 24/172: escape display name and email

[David Prévot]

This is an automated email from the git hooks/post-receive script.

taffit pushed a commit to branch master
in repository owncloud.

commit 78c0cc6089b584db08871108a979f72c1245dc1e
Author: Thomas Müller <thomas.mueller at tmit.eu>
Date:   Fri May 9 23:12:26 2014 +0200

    escape display name and email
---
 core/js/share.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/core/js/share.js b/core/js/share.js
index 2813570..372f351 100644
--- a/core/js/share.js
+++ b/core/js/share.js
@@ -348,7 +348,7 @@ OC.Share={
 				})
 				.data("ui-autocomplete")._renderItem = function( ul, item ) {
 					return $( "<li>" )
-						.append( "<a>" + item.displayname + "<br>" + item.email + "</a>" )
+						.append( "<a>" + escapeHTML(item.displayname) + "<br>" + escapeHTML(item.email) + "</a>" )
 						.appendTo( ul );
 				};
 			}

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-owncloud/owncloud.git