Update share.js

Added HTML escaping

diff --git a/core/js/share.js b/core/js/share.js
index 0b6afda59c4ca51e4d1a91449f4b226b3b39f9d8..8e767663f1285ca34e4bc63308b1905ed557ad87 100644 (file)
--- a/core/js/share.js
+++ b/core/js/share.js
@@ -84,10 +84,10 @@ OC.Share={
                                var img = action.find('img').attr('src', image);
                                if (shares) {
                                        action.addClass('permanent');
-                                       action.html(' '+t('core', 'Shared')).prepend(img);
+                                       action.html(' '+ escapeHTML(t('core', 'Shared'))).prepend(img);
                                } else {
                                        action.removeClass('permanent');
-                                       action.html(' '+t('core', 'Share')).prepend(img);
+                                       action.html(' '+ escapeHTML(t('core', 'Share'))).prepend(img);
                                }
                        }
                }