mirror of https://github.com/zlatinb/muwire
sanitize input in /FileDetails page. Thanks to Beardog for the report
parent
accf8301ad
commit
a73a7a4ad3
|
@ -11,7 +11,7 @@ String helptext = Util._t("View details about the selected shared file here.");
|
|||
|
||||
String path = request.getParameter("path");
|
||||
File file = Util.getFromPathElements(path);
|
||||
|
||||
String filePath = Util.escapeHTMLinXML(file.getAbsolutePath());
|
||||
%>
|
||||
|
||||
<html>
|
||||
|
@ -31,7 +31,7 @@ File file = Util.getFromPathElements(path);
|
|||
<%@include file="sidebar.jsi"%>
|
||||
</aside>
|
||||
<section class="main foldermain">
|
||||
<h2><%=Util._t("Details for {0}", file.getAbsolutePath())%></h2>
|
||||
<h2><%=Util._t("Details for {0}", filePath)%></h2>
|
||||
<h3><%=Util._t("Search Hits")%></h3>
|
||||
<div id="table-wrapper">
|
||||
<div id="table-scroll">
|
||||
|
|
Loading…
Reference in New Issue