On Tue, Dec 4, 2012 at 23:45:19 +0100, Michael Banck wrote:
> +Index: owncloud-4.0.4debian2/apps/files/js/filelist.js
> +===================================================================
> +--- owncloud-4.0.4debian2.orig/apps/files/js/filelist.js 2012-12-04 22:47:26.810080751 +0100
> ++++ owncloud-4.0.4debian2/apps/files/js/filelist.js 2012-12-04 22:47:26.874081078 +0100
> +@@ -14,9 +14,9 @@
> + var extension=false;
> + }
> + html+='<td class="filename" style="background-image:url('+img+')"><input type="checkbox" />';
> +- html+='<a class="name" href="download.php?file='+$('#dir').val().replace(/</, '<').replace(/>/, '>')+'/'+name+'"><span class="nametext">'+basename
> ++ html+='<a class="name" href="download.php?file='+$('#dir').val().replace(/</, '<').replace(/>/, '>')+'/'+escapeHTML(name)+'"><span class="nametext">'+escapeHTML(basename);
> + if(extension){
> +- html+='<span class="extension">'+extension+'</span>';
> ++ html+='<span class="extension">'+escapeHTML(extension)+'</span>';
> + }
> + html+='</span></a></td>';
> + if(size!='Pending'){
As far as I can tell this escapeHTML function is not defined in the
current version? Upstream git has it in core/js/js.js.
Cheers,
Julien
Attachment:
signature.asc
Description: Digital signature