From 51e68729de3402fd7bc90e123c432538659b6b31 Mon Sep 17 00:00:00 2001 From: Robin Appelman Date: Fri, 30 Sep 2011 10:57:39 +0200 Subject: escape file and directory names when downloading files --- files/js/fileactions.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'files/js') diff --git a/files/js/fileactions.js b/files/js/fileactions.js index ddb16ecd5fd..0089c235ebf 100644 --- a/files/js/fileactions.js +++ b/files/js/fileactions.js @@ -125,7 +125,7 @@ FileActions={ } FileActions.register('all','Download',function(){return OC.imagePath('core','actions/download')},function(filename){ - window.location='ajax/download.php?files='+filename+'&dir='+$('#dir').val(); + window.location='ajax/download.php?files='+encodeURIComponent(filename)+'&dir='+encodeURIComponent($('#dir').val()); }); FileActions.register('all','Delete',function(){return OC.imagePath('core','actions/delete')},function(filename){ -- cgit v1.2.3