haiwen/seahub
1
0
Fork 0
mirror of https://github.com/haiwen/seahub.git synced 2025-09-19 18:29:23 +00:00
Code Issues Releases Wiki Activity

More escapes in share/delete

Browse Source
This commit is contained in:
zhengxie
2015-03-12 13:24:47 +08:00
parent af43c8f76e
commit 43c405a28b
2 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
seahub/templates/snippets/myhome_extra_script.html
View File

@@ -22,7 +22,7 @@ $(function () {
hd = $('.hd', form),
btn_ct = $(this).parents('td'),
repo_id = btn_ct.data('id'),
repo_name = btn_ct.attr('data-name');
repo_name = HTMLescape(btn_ct.attr('data-name'));
var grp_options_ct = $('#share-grp-options');
if (!$.trim(grp_options_ct.html())) {
var grp_options = '<ul class="option-list">';

2
seahub/templates/snippets/repo_del_js.html
View File

@@ -30,7 +30,7 @@ $('.repo-delete-btn').click(function() {
cfm.css({'left': op.position().left, 'top': op.position().top + op.height() + 2, 'width':202});
}
var con = $('.con', cfm);
con.html(con.html().replace('%(lib_name)s', '<span class="op-target">' + cfm.parents('td').attr('data-name') + '</span>'));
con.html(con.html().replace('%(lib_name)s', '<span class="op-target">' + HTMLescape(cfm.parents('td').attr('data-name')) + '</span>'));
cfm.removeClass('hide');
$('.no',cfm).click(function() {
cfm.addClass('hide');