Pass path parameter through htmlpecialchars()

This commit is contained in:
Renato Botelho 2014-11-18 11:54:52 -02:00
parent f376043cf3
commit a8c82ef955
1 changed files with 1 additions and 1 deletions

View File

@ -229,7 +229,7 @@ outputJavaScriptFileInline("javascript/base64.js");
<?php if($_GET['action'] == "load"): ?>
jQuery(window).load(
function() {
jQuery("#fbTarget").val("<?=$_GET['path'];?>");
jQuery("#fbTarget").val("<?=htmlspecialchars($_GET['path']);?>");
loadFile();
}
);