mirror of
https://github.com/Pathduck/gallery3.git
synced 2026-07-16 18:32:07 -04:00
(mostly harmless) XSS fix in server add
This commit is contained in:
@@ -9,7 +9,7 @@
|
||||
<? foreach ($parents as $dir): ?>
|
||||
<li class="ui-icon-left">
|
||||
<span class="ui-icon ui-icon-folder-open"></span>
|
||||
<span ondblclick="open_dir('<?= $dir ?>')">
|
||||
<span ondblclick="open_dir(<?= html::js_string($dir) ?>)">
|
||||
<?= html::clean(basename($dir)) ?>
|
||||
</span>
|
||||
<ul>
|
||||
@@ -22,7 +22,7 @@
|
||||
<? if (is_dir($file)): ?>
|
||||
ondblclick="open_dir($(this).attr('file'))"
|
||||
<? endif ?>
|
||||
file="<?= strtr($file, array('"' => '\\"')) ?>"
|
||||
file="<?= html::clean_attribute($file) ?>"
|
||||
>
|
||||
<?= html::clean(basename($file)) ?>
|
||||
</span>
|
||||
|
||||
Reference in New Issue
Block a user