Encode requesttoken

One cannot make any assumptions about the requesttoken content. Thus we need to encode it.

diff --git a/core/js/eventsource.js b/core/js/eventsource.js
index 6f23cebb685a3f517aec787e9d34267889c8d2f4..d1cdfda485e36061eb4efffe747b35002b8188bc 100644 (file)
--- a/core/js/eventsource.js
+++ b/core/js/eventsource.js
@@ -49,7 +49,7 @@ OC.EventSource=function(src,data){
                        dataStr+=name+'='+encodeURIComponent(data[name])+'&';
                }
        }
-       dataStr+='requesttoken='+oc_requesttoken;
+       dataStr+='requesttoken='+encodeURIComponent(oc_requesttoken);
        if(!this.useFallBack && typeof EventSource !== 'undefined'){
                joinChar = '&';
                if(src.indexOf('?') === -1) {