Security fix (properly escapes href)

This commit is contained in:
Simone Mainardi 2017-02-02 10:29:35 +01:00
parent 77a17361a5
commit 3c659184d3

View file

@ -127,7 +127,7 @@ function navigatedir(url, label, base, path, go_deep, print_html, ifid, host, st
if(print_html) then
if(not(printed)) then print('<li class="divider"></li>\n') printed = true end
print("<li> <A HREF="..url..what..">"..label.."</A> </li>\n")
print("<li> <A HREF=\""..url..what.."\">"..label.."</A> </li>\n")
end
end
end