diff options
Diffstat (limited to 'js/vendor')
| -rw-r--r-- | js/vendor/owncloud/share.js | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/js/vendor/owncloud/share.js b/js/vendor/owncloud/share.js index 7e834dba..b31b28cf 100644 --- a/js/vendor/owncloud/share.js +++ b/js/vendor/owncloud/share.js @@ -296,7 +296,7 @@ showDropDown:function(itemType, itemSource, appendTo, link, possiblePermissions, filename) { var data = OC.Share.loadItem(itemType, itemSource); var dropDownEl; - var html = '<div id="dropdown" class="drop shareDropDown" data-item-type="'+itemType+'" data-item-source="'+itemSource+'">'; + var html = '<div id="dropdown" class="drop shareDropDown" data-item-type="'+escapeHTML(itemType)+'" data-item-source="'+escapeHTML(itemSource)+'">'; if (data !== false && data.reshare !== false && data.reshare.uid_owner !== undefined && data.reshare.uid_owner !== OC.currentUser) { html += '<span class="reshare">'; if (oc_config.enable_avatars === true) { |