Sanitizing user input

owncloud · Jun 11, 2012 · 8f09299 · 8f09299
1 parent c898a8a
commit 8f09299
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/apps/gallery/lib/tiles.php b/apps/gallery/lib/tiles.php
@@ -141,7 +141,7 @@ public function getWidth() {
 	}
 
 	public function get() {
-		$r = '<div class="title gallery_div">'.$this->stack_name.'</div>';
+		$r = '<div class="title gallery_div">'.htmlentities($this->stack_name).'</div>';
 		for ($i = 0; $i < count($this->tiles_array); $i++) {
 			$top = rand(-5, 5);
 			$left = rand(-5, 5);
@@ -168,7 +168,7 @@ public function getCount() {
 	}
 
 	public function getOnClickAction() {
-		return 'javascript:openNewGal(\''.$this->stack_name.'\');';
+		return 'javascript:openNewGal(\''.htmlentities($this->stack_name).'\');';
 	}
 
 	private $tiles_array;

diff --git a/apps/gallery/templates/index.php b/apps/gallery/templates/index.php
@@ -14,7 +14,7 @@
 </style>
 <script type="text/javascript">
 
-var root = "<?php echo $root; ?>";
+var root = "<?php echo htmlentities($root); ?>";
 
 function explode(element) {
 	$('div', element).each(function(index, elem) {