Update share.js

Added HTML escaping
14 years ago · 9ad03b61a3
parent 6e5e8c6b46
commit 9ad03b61a3
1 changed files with 2 additions and 2 deletions
--- a/core/js/share.js
+++ b/core/js/share.js
@ -84,10 +84,10 @@ OC.Share={
 				var img = action.find('img').attr('src', image);
 				if (shares) {
 					action.addClass('permanent');
-					action.html(' '+t('core', 'Shared')).prepend(img);
+					action.html(' '+ escapeHTML(t('core', 'Shared'))).prepend(img);
 				} else {
 					action.removeClass('permanent');
-					action.html(' '+t('core', 'Share')).prepend(img);
+					action.html(' '+ escapeHTML(t('core', 'Share'))).prepend(img);
 				}
 			}
 		}