diff options
| author | Lukas Reschke <lukas@statuscode.ch> | 2013-06-29 15:24:05 +0400 |
|---|---|---|
| committer | Lukas Reschke <lukas@statuscode.ch> | 2013-06-29 15:43:19 +0400 |
| commit | 87ef9305874909e19c43309f482f6fb05925ef60 (patch) | |
| tree | 4e1ebb07766f373280224cec6403283036dd9280 /core | |
| parent | 498bb50597ac382e72e08328785e2a4e2a6b9968 (diff) | |
Escape dropdown
Fixes #3241
Diffstat (limited to 'core')
| -rw-r--r-- | core/js/share.js | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/core/js/share.js b/core/js/share.js index 3a45178d277..59d44880c2f 100644 --- a/core/js/share.js +++ b/core/js/share.js @@ -149,9 +149,9 @@ OC.Share={ var html = '<div id="dropdown" class="drop" data-item-type="'+itemType+'" data-item-source="'+itemSource+'">'; if (data !== false && data.reshare !== false && data.reshare.uid_owner !== undefined) { if (data.reshare.share_type == OC.Share.SHARE_TYPE_GROUP) { - html += '<span class="reshare">'+t('core', 'Shared with you and the group {group} by {owner}', {group: data.reshare.share_with, owner: data.reshare.displayname_owner})+'</span>'; + html += '<span class="reshare">'+t('core', 'Shared with you and the group {group} by {owner}', {group: escapeHTML(data.reshare.share_with), owner: escapeHTML(data.reshare.displayname_owner)})+'</span>'; } else { - html += '<span class="reshare">'+t('core', 'Shared with you by {owner}', {owner: data.reshare.displayname_owner})+'</span>'; + html += '<span class="reshare">'+t('core', 'Shared with you by {owner}', {owner: escapeHTML(data.reshare.displayname_owner)})+'</span>'; } html += '<br />'; } |