From 912a536c17b8ee6bcd53f9b9f6fb0115387c316e Mon Sep 17 00:00:00 2001 From: Lukas Reschke Date: Mon, 16 Feb 2015 20:28:30 +0100 Subject: [PATCH] Encode requesttoken One cannot make any assumptions about the requesttoken content. Thus we need to encode it. --- core/js/eventsource.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/core/js/eventsource.js b/core/js/eventsource.js index 6f23cebb68..d1cdfda485 100644 --- a/core/js/eventsource.js +++ b/core/js/eventsource.js @@ -49,7 +49,7 @@ OC.EventSource=function(src,data){ dataStr+=name+'='+encodeURIComponent(data[name])+'&'; } } - dataStr+='requesttoken='+oc_requesttoken; + dataStr+='requesttoken='+encodeURIComponent(oc_requesttoken); if(!this.useFallBack && typeof EventSource !== 'undefined'){ joinChar = '&'; if(src.indexOf('?') === -1) {