diff options
| author | Lukas Reschke <lukas@statuscode.ch> | 2014-04-18 11:36:59 +0200 |
|---|---|---|
| committer | Lukas Reschke <lukas@statuscode.ch> | 2014-04-18 11:36:59 +0200 |
| commit | a7bc716b95e5a1a07ef2756d56e4e9f7915b2fcd (patch) | |
| tree | 6d85fc61b04f3db5a80f402a693beed9020216f8 | |
| parent | c4d4065dc2ab6f1533d668de47de02a3145f978b (diff) | |
| parent | a30040411c0068703b781099e64df2b299242117 (diff) | |
| download | nextcloud-server-a7bc716b95e5a1a07ef2756d56e4e9f7915b2fcd.tar.gz nextcloud-server-a7bc716b95e5a1a07ef2756d56e4e9f7915b2fcd.zip | |
Merge pull request #8259 from owncloud/backport-7682-6
Backport #7682
| -rw-r--r-- | lib/private/eventsource.php | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/lib/private/eventsource.php b/lib/private/eventsource.php index a83084d9251..5080b8d066f 100644 --- a/lib/private/eventsource.php +++ b/lib/private/eventsource.php @@ -63,8 +63,9 @@ class OC_EventSource{ $type=null; } if($this->fallback) { + $fallBackId = OC_Util::sanitizeHTML($this->fallBackId); $response='<script type="text/javascript">window.parent.OC.EventSource.fallBackCallBack(' - .$this->fallBackId.',"'.$type.'",'.json_encode($data).')</script>'.PHP_EOL; + .$fallBackId.',"'.$type.'",'.json_encode($data).')</script>'.PHP_EOL; echo $response; }else{ if($type) { |