mbk-lab
/
nextcloud
2
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Merge pull request #2062 from owncloud/shareType 

Sanitize shareWith
This commit is contained in:
Bernhard Posselt 2013-03-03 16:27:51 -08:00
parent b738aaba2a 577945bd33
commit 841daf4845
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
core/js/share.js
View File

@ -309,12 +309,12 @@ OC.Share={
if (permissions & OC.PERMISSION_SHARE) { if (permissions & OC.PERMISSION_SHARE) {
shareChecked = 'checked="checked"'; shareChecked = 'checked="checked"';
} }
var html = '<li style="clear: both;" data-share-type="'+shareType+'" data-share-with="'+shareWith+'" title="' + shareWith + '">'; var html = '<li style="clear: both;" data-share-type="'+escapeHTML(shareType)+'" data-share-with="'+escapeHTML(shareWith)+'" title="' + escapeHTML(shareWith) + '">';
html += '<a href="#" class="unshare" style="display:none;"><img class="svg" alt="'+t('core', 'Unshare')+'" src="'+OC.imagePath('core', 'actions/delete')+'"/></a>'; html += '<a href="#" class="unshare" style="display:none;"><img class="svg" alt="'+t('core', 'Unshare')+'" src="'+OC.imagePath('core', 'actions/delete')+'"/></a>';
if(shareWith.length > 14){ if(shareWith.length > 14){
html += shareWithDisplayName.substr(0,11) + '...'; html += escapeHTML(shareWithDisplayName.substr(0,11) + '...');
}else{ }else{
html += shareWithDisplayName; html += escapeHTML(shareWithDisplayName);
} }
if (possiblePermissions & OC.PERMISSION_CREATE || possiblePermissions & OC.PERMISSION_UPDATE || possiblePermissions & OC.PERMISSION_DELETE) { if (possiblePermissions & OC.PERMISSION_CREATE || possiblePermissions & OC.PERMISSION_UPDATE || possiblePermissions & OC.PERMISSION_DELETE) {
if (editChecked == '') { if (editChecked == '') {