d4708/qBittorrent
1
0
Fork 0
mirror of https://github.com/d47081/qBittorrent.git synced 2025-09-03 09:32:00 +00:00
Code Issues Projects Releases Wiki Activity

Fix encoding of special characters

Browse Source 
Special characters would get html encoded (& -> &amp;). This has been tested against several payloads (e.g. <script>alert(0)</script>) to ensure it's not vulnerable to XSS.
This commit is contained in:
Tom Piccirello 2019-06-20 22:15:32 -07:00 committed by GitHub
parent 183db3475a
commit 368fbd9e7d
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
src/webui/www/private/rename.html
View File

@ -33,7 +33,7 @@
var name = new URI().getData('name'); var name = new URI().getData('name');
// set text field to current value // set text field to current value
if (name) if (name)
$('rename').value = escapeHtml(decodeURIComponent(name)); $('rename').value = decodeURIComponent(name);
$('rename').focus(); $('rename').focus();
$('renameButton').addEvent('click', function(e) { $('renameButton').addEvent('click', function(e) {