Merge pull request #8259 from owncloud/backport-7682-6

Backport #7682
13 years ago · a7bc716b95
parent c4d4065dc2 a30040411c
commit a7bc716b95
1 changed files with 2 additions and 1 deletions
--- a/lib/private/eventsource.php
+++ b/lib/private/eventsource.php
@ -63,8 +63,9 @@ class OC_EventSource{
 			$type=null;
 		}
 		if($this->fallback) {
+			$fallBackId = OC_Util::sanitizeHTML($this->fallBackId);
 			$response='<script type="text/javascript">window.parent.OC.EventSource.fallBackCallBack('
-				.$this->fallBackId.',"'.$type.'",'.json_encode($data).')</script>'.PHP_EOL;
+				.$fallBackId.',"'.$type.'",'.json_encode($data).')</script>'.PHP_EOL;
 			echo $response;
 		}else{
 			if($type) {