upstream/nextcloud
1
0
Fork 0
mirror of https://github.com/nextcloud/server.git synced 2026-04-22 23:03:00 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions 53

properly escape variable

Browse source
This commit is contained in:
Jan-Christoph Borchardt 2014-12-18 17:19:23 +01:00
parent 96ae18db59
commit cd81687a38
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
apps/files/js/file-upload.js
View file

@ -579,7 +579,7 @@ OC.Upload = {
input.val(newName);
input.attr('id', fileType);
}
var label = $('<label class="hidden-visually" for="">' + newName + '</label>');
var label = $('<label class="hidden-visually" for="">' + escapeHTML(newName) + '</label>');
label.attr('for', fileType);
form.append(label).append(input);