xss vulnerabilities fixed

13 years ago · e1fa9c282b
parent 033d372f98
commit e1fa9c282b
2 changed files with 2 additions and 2 deletions
--- a/apps/gallery/lib/tiles.php
+++ b/apps/gallery/lib/tiles.php
@ -168,7 +168,7 @@ class TileStack extends TileBase {
 	}
 	
 	public function getOnClickAction() {
-		return 'javascript:openNewGal(\''.$this->stack_name.'\');';
+		return 'javascript:openNewGal(\''.\OCP\Util::sanitizeHTML($this->stack_name).'\');';
 	}

 	private $tiles_array;
--- a/apps/gallery/templates/index.php
+++ b/apps/gallery/templates/index.php
@ -1,6 +1,6 @@
 <script type="text/javascript">

-var root = "<?php echo $_['root']; ?>";
+var root = "<?php echo OCP\Util::sanitizeHTML($_['root']); ?>";

 $(document).ready(function() {
 		$("a[rel=images]").fancybox({