diff options
author | Vincent Petry <pvince81@owncloud.com> | 2016-06-24 09:20:13 +0200 |
---|---|---|
committer | Vincent Petry <pvince81@owncloud.com> | 2016-06-24 09:20:13 +0200 |
commit | 0501d8daacde4a67610210f2543d24c462d9098c (patch) | |
tree | fedb49a8ee65b9c373e2625aca6ecc8459831f94 /settings | |
parent | 9092d7f5eac2cbdf24dad1d60c4bb98ca380c485 (diff) | |
download | nextcloud-server-0501d8daacde4a67610210f2543d24c462d9098c.tar.gz nextcloud-server-0501d8daacde4a67610210f2543d24c462d9098c.zip |
Prevent negative or non-number values in quota input
Diffstat (limited to 'settings')
-rw-r--r-- | settings/js/users/users.js | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/settings/js/users/users.js b/settings/js/users/users.js index a4d88204861..2524a1da0bb 100644 --- a/settings/js/users/users.js +++ b/settings/js/users/users.js @@ -582,6 +582,12 @@ var UserList = { if (quota === 'other') { return; } + if (isNaN(parseInt(quota, 10)) || parseInt(quota, 10) < 0) { + // the select component has added the bogus value, delete it again + $select.find('option[selected]').remove(); + OC.Notification.showTemporary(t('core', 'Invalid quota value "{val}"', {val: quota})); + return; + } UserList._updateQuota(uid, quota, function(returnedQuota){ if (quota !== returnedQuota) { $select.find(':selected').text(returnedQuota); |