diff options
| author | Lukas Reschke <lukas@statuscode.ch> | 2014-04-18 11:37:24 +0200 |
|---|---|---|
| committer | Lukas Reschke <lukas@statuscode.ch> | 2014-04-18 11:37:24 +0200 |
| commit | 93a11362bec7f16e0928b52388524053e6b1e98e (patch) | |
| tree | 48e7c9db70bc13152ef91858edba513fa2490c2e | |
| parent | ec6c2a3fabc4a394804a224cb4ec7a4409d2214d (diff) | |
| download | nextcloud-server-93a11362bec7f16e0928b52388524053e6b1e98e.tar.gz nextcloud-server-93a11362bec7f16e0928b52388524053e6b1e98e.zip | |
Backport of #7682 to stable5
| -rw-r--r-- | lib/eventsource.php | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/lib/eventsource.php b/lib/eventsource.php index 31d6edc1874..de50712fda8 100644 --- a/lib/eventsource.php +++ b/lib/eventsource.php @@ -63,8 +63,9 @@ class OC_EventSource{ $type=null; } if($this->fallback) { + $fallBackId = OC_Util::sanitizeHTML($this->fallBackId); $response='<script type="text/javascript">window.parent.OC.EventSource.fallBackCallBack(' - .$this->fallBackId.',"'.$type.'",'.json_encode($data).')</script>'.PHP_EOL; + .$fallBackId.',"'.$type.'",'.json_encode($data).')</script>'.PHP_EOL; echo $response; }else{ if($type) { |