diff options
| author | Lukas Reschke <lukas@statuscode.ch> | 2013-06-29 13:24:05 +0200 |
|---|---|---|
| committer | Lukas Reschke <lukas@statuscode.ch> | 2013-06-29 13:24:05 +0200 |
| commit | 0217315a24d5d06f6fc3f0304460eeb9a0bbf143 (patch) | |
| tree | 18576725264814ee7574e845724a3c38352515ca /core/js | |
| parent | 414b5f150e64b88b5b7b41fbcc05d13c0797ab08 (diff) | |
| download | nextcloud-server-0217315a24d5d06f6fc3f0304460eeb9a0bbf143.tar.gz nextcloud-server-0217315a24d5d06f6fc3f0304460eeb9a0bbf143.zip | |
Escape dropdown
Fixes #3241
Diffstat (limited to 'core/js')
| -rw-r--r-- | core/js/share.js | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/core/js/share.js b/core/js/share.js index cb37dd70366..588202d2273 100644 --- a/core/js/share.js +++ b/core/js/share.js @@ -149,9 +149,9 @@ OC.Share={ var html = '<div id="dropdown" class="drop" data-item-type="'+itemType+'" data-item-source="'+itemSource+'">'; if (data !== false && data.reshare !== false && data.reshare.uid_owner !== undefined) { if (data.reshare.share_type == OC.Share.SHARE_TYPE_GROUP) { - html += '<span class="reshare">'+t('core', 'Shared with you and the group {group} by {owner}', {group: data.reshare.share_with, owner: data.reshare.displayname_owner})+'</span>'; + html += '<span class="reshare">'+t('core', 'Shared with you and the group {group} by {owner}', {group: escapeHTML(data.reshare.share_with), owner: escapeHTML(data.reshare.displayname_owner)})+'</span>'; } else { - html += '<span class="reshare">'+t('core', 'Shared with you by {owner}', {owner: data.reshare.displayname_owner})+'</span>'; + html += '<span class="reshare">'+t('core', 'Shared with you by {owner}', {owner: escapeHTML(data.reshare.displayname_owner)})+'</span>'; } html += '<br />'; } |