sanitize input in /FileDetails page. Thanks to Beardog for the report

hotfix/0.8.7
Zlatin Balevsky 2021-07-06 20:37:58 +01:00
parent accf8301ad
commit a73a7a4ad3
No known key found for this signature in database
GPG Key ID: A72832072D525E41
1 changed files with 2 additions and 2 deletions

View File

@ -11,7 +11,7 @@ String helptext = Util._t("View details about the selected shared file here.");
String path = request.getParameter("path");
File file = Util.getFromPathElements(path);
String filePath = Util.escapeHTMLinXML(file.getAbsolutePath());
%>
<html>
@ -31,7 +31,7 @@ File file = Util.getFromPathElements(path);
<%@include file="sidebar.jsi"%>
</aside>
<section class="main foldermain">
<h2><%=Util._t("Details for {0}", file.getAbsolutePath())%></h2>
<h2><%=Util._t("Details for {0}", filePath)%></h2>
<h3><%=Util._t("Search Hits")%></h3>
<div id="table-wrapper">
<div id="table-scroll">