diff options
author | Joas Schilling <coding@schilljs.com> | 2019-01-14 14:09:12 +0100 |
---|---|---|
committer | Joas Schilling <coding@schilljs.com> | 2019-01-14 14:09:12 +0100 |
commit | 86e6cebc18b63162b92f94d7b37e33f5f9c68175 (patch) | |
tree | 958bbc74a0dc7055a4f7b2ce5439c83a9cb14ff2 /core/js/sharedialogview.js | |
parent | eeec3c7e8689bad0d3a80f9eb1c393833f6a0c3c (diff) | |
download | nextcloud-server-86e6cebc18b63162b92f94d7b37e33f5f9c68175.tar.gz nextcloud-server-86e6cebc18b63162b92f94d7b37e33f5f9c68175.zip |
Correctly handle displaynames returned from the sharee API
Signed-off-by: Joas Schilling <coding@schilljs.com>
Diffstat (limited to 'core/js/sharedialogview.js')
-rw-r--r-- | core/js/sharedialogview.js | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/core/js/sharedialogview.js b/core/js/sharedialogview.js index a433570b13d..eabcf2f3b24 100644 --- a/core/js/sharedialogview.js +++ b/core/js/sharedialogview.js @@ -477,7 +477,7 @@ autocompleteRenderItem: function(ul, item) { var icon = 'icon-user'; - var text = item.label; + var text = escapeHTML(item.label); var description = ''; var type = ''; var getTranslatedType = function(type) { @@ -497,7 +497,7 @@ } if (typeof item.name !== 'undefined') { - text = item.name; + text = escapeHTML(item.name); } if (item.value.shareType === OC.Share.SHARE_TYPE_GROUP) { icon = 'icon-contacts-dark'; |