From 9ad03b61a357fa1edb322ffd1aab4d62daa856e5 Mon Sep 17 00:00:00 2001
From: Bernhard Posselt <nukeawhale@gmail.com>
Date: Fri, 8 Mar 2013 17:29:05 +0100
Subject: [PATCH] Update share.js

Added HTML escaping
---
 core/js/share.js | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/core/js/share.js b/core/js/share.js
index 0b6afda59c..8e767663f1 100644
--- a/core/js/share.js
+++ b/core/js/share.js
@@ -84,10 +84,10 @@ OC.Share={
 				var img = action.find('img').attr('src', image);
 				if (shares) {
 					action.addClass('permanent');
-					action.html(' '+t('core', 'Shared')).prepend(img);
+					action.html(' '+ escapeHTML(t('core', 'Shared'))).prepend(img);
 				} else {
 					action.removeClass('permanent');
-					action.html(' '+t('core', 'Share')).prepend(img);
+					action.html(' '+ escapeHTML(t('core', 'Share'))).prepend(img);
 				}
 			}
 		}