Properly hand over user data and notify the viewer about loading

Signed-off-by: Julius Härtl <jus@bitgrid.net>

1 files changed, 1 insertions, 1 deletions

diff --git a/templates/documents.php b/templates/documents.php
index a64a0f51..38379f1b 100644
--- a/templates/documents.php
+++ b/templates/documents.php
@@ -5,7 +5,7 @@
 	var richdocuments_token = '<?php p($_['token']) ?>';
 	var richdocuments_urlsrc = '<?php p($_['urlsrc']) ?>';
 	var richdocuments_path = '<?php p($_['path']) ?>';
-	var richdocuments_userId = <?php isset($_['userId']) ? p('\'' . $_['userId'] . '\'') : p('null') ?>;
+	var richdocuments_userId = <?php isset($_['userId']) ? print_unescaped('\'' . \OCP\Util::sanitizeHTML($_['userId']) . '\'') : print_unescaped('null') ?>;
 	var richdocuments_instanceId = '<?php p($_['instanceId']) ?>';
 	var richdocuments_canonical_webroot = '<?php p($_['canonical_webroot']) ?>';
 	var richdocuments_directEdit = <?php isset($_['direct']) ? p('true') : p('false') ?>;