diff options
author | Lukas Reschke <lukas@owncloud.com> | 2016-04-18 17:38:14 +0200 |
---|---|---|
committer | Lukas Reschke <lukas@owncloud.com> | 2016-04-18 17:43:20 +0200 |
commit | ff1150bb4db3772895be8e4c7291ebb2ff3314f9 (patch) | |
tree | 293d767d9d8ce2e7cdaf7e60b3c79f790e1116df /settings/js | |
parent | 14fdafaede311ccebcb35729d4643554580d4071 (diff) | |
download | nextcloud-server-ff1150bb4db3772895be8e4c7291ebb2ff3314f9.tar.gz nextcloud-server-ff1150bb4db3772895be8e4c7291ebb2ff3314f9.zip |
Properly escape URL
Fixes https://github.com/owncloud/core/issues/23499
Diffstat (limited to 'settings/js')
-rw-r--r-- | settings/js/users/deleteHandler.js | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/settings/js/users/deleteHandler.js b/settings/js/users/deleteHandler.js index b684aff1889..a66e8b07a72 100644 --- a/settings/js/users/deleteHandler.js +++ b/settings/js/users/deleteHandler.js @@ -191,7 +191,7 @@ DeleteHandler.prototype.deleteEntry = function(keepNotification) { payload[dh.ajaxParamID] = dh.oidToDelete; return $.ajax({ type: 'DELETE', - url: OC.generateUrl(dh.ajaxEndpoint+'/'+this.oidToDelete), + url: OC.generateUrl(dh.ajaxEndpoint+'/{oid}',{oid: this.oidToDelete}), // FIXME: do not use synchronous ajax calls as they block the browser ! async: false, success: function (result) { |