fix: escape special characters in preview url (closes #1002)

filebrowser · Jul 28, 2020 · c9340af · c9340af
1 parent a722bcc
commit c9340af
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/frontend/src/components/files/Preview.vue b/frontend/src/components/files/Preview.vue
@@ -99,13 +99,13 @@ export default {
       return (this.nextLink !== '')
     },
     download () {
-      return `${baseURL}/api/raw${this.req.path}?auth=${this.jwt}`
+      return `${baseURL}/api/raw${escape(this.req.path)}?auth=${this.jwt}`
     },
     previewUrl () {
       if (this.req.type === 'image') {
-        return `${baseURL}/api/preview/big${this.req.path}?auth=${this.jwt}`
+        return `${baseURL}/api/preview/big${escape(this.req.path)}?auth=${this.jwt}`
       }
-      return `${baseURL}/api/raw${this.req.path}?auth=${this.jwt}`
+      return `${baseURL}/api/raw${escape(this.req.path)}?auth=${this.jwt}`
     },
     raw () {
       return `${this.previewUrl}&inline=true`