From: Lukas Reschke <lukas@owncloud.com>
Date: Mon, 16 Feb 2015 19:28:30 +0000 (+0100)
Subject: Encode requesttoken
X-Git-Tag: v8.1.0alpha1~462^2
X-Git-Url: https://source.dussan.org/?a=commitdiff_plain;h=912a536c17b8ee6bcd53f9b9f6fb0115387c316e;p=nextcloud-server.git

Encode requesttoken

One cannot make any assumptions about the requesttoken content. Thus we need to encode it.
---

diff --git a/core/js/eventsource.js b/core/js/eventsource.js
index 6f23cebb685..d1cdfda485e 100644
--- a/core/js/eventsource.js
+++ b/core/js/eventsource.js
@@ -49,7 +49,7 @@ OC.EventSource=function(src,data){
 			dataStr+=name+'='+encodeURIComponent(data[name])+'&';
 		}
 	}
-	dataStr+='requesttoken='+oc_requesttoken;
+	dataStr+='requesttoken='+encodeURIComponent(oc_requesttoken);
 	if(!this.useFallBack && typeof EventSource !== 'undefined'){
 		joinChar = '&';
 		if(src.indexOf('?') === -1) {