github/qBittorrent
1
0
Fork 0
mirror of https://github.com/qbittorrent/qBittorrent synced 2025-07-31 03:50:20 -07:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Utilize escapeHtml

Browse source
This commit is contained in:
Chocobo1 2017-02-11 15:06:15 +08:00 • committed by sledgehammer999
parent 6ca3e4f094
commit 0fb3b18a8f
No known key found for this signature in database
GPG key ID: 6E4A2D025B7CC9A2
4 changed files with 9 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

4
src/webui/www/public/scripts/client.js
View file

@ -629,6 +629,10 @@ var loadTorrentPeersData = function(){
if (response['peers']) { if (response['peers']) {
for (var key in response['peers']) { for (var key in response['peers']) {
response['peers'][key]['rowId'] = key; response['peers'][key]['rowId'] = key;
if (response['peers'][key]['client'])
response['peers'][key]['client'] = escapeHtml(response['peers'][key]['client']);
torrentPeersTable.updateRowData(response['peers'][key]); torrentPeersTable.updateRowData(response['peers'][key]);
} }
} }

2
src/webui/www/public/scripts/prop-files.js
View file

@ -311,7 +311,7 @@ var loadTorrentFilesData = function() {
var row = new Array(); var row = new Array();
row.length = 4; row.length = 4;
row[0] = file.priority; row[0] = file.priority;
row[1] = file.name; row[1] = escapeHtml(file.name);
row[2] = friendlyUnit(file.size, false); row[2] = friendlyUnit(file.size, false);
row[3] = (file.progress * 100).round(1); row[3] = (file.progress * 100).round(1);
if (row[3] == 100.0 && file.progress < 1.0) if (row[3] == 100.0 && file.progress < 1.0)

4
src/webui/www/public/scripts/prop-general.js
View file

@ -130,7 +130,7 @@ var loadTorrentData = function() {
temp = "QBT_TR(Unknown)QBT_TR"; temp = "QBT_TR(Unknown)QBT_TR";
$('pieces').set('html', temp); $('pieces').set('html', temp);
$('created_by').set('html', data.created_by); $('created_by').set('html', escapeHtml(data.created_by));
if (data.addition_date != -1) if (data.addition_date != -1)
temp = new Date(data.addition_date * 1000).toLocaleString(); temp = new Date(data.addition_date * 1000).toLocaleString();
else else
@ -152,7 +152,7 @@ var loadTorrentData = function() {
$('save_path').set('html', data.save_path); $('save_path').set('html', data.save_path);
$('comment').set('html', parseHtmlLinks(data.comment)); $('comment').set('html', parseHtmlLinks(escapeHtml(data.comment)));
} }
else { else {
clearData(); clearData();

4
src/webui/www/public/scripts/prop-trackers.js
View file

@ -87,10 +87,10 @@ var loadTrackersData = function() {
trackers.each(function(tracker) { trackers.each(function(tracker) {
var row = new Array(); var row = new Array();
row.length = 4; row.length = 4;
row[0] = tracker.url; row[0] = escapeHtml(tracker.url);
row[1] = tracker.status; row[1] = tracker.status;
row[2] = tracker.num_peers; row[2] = tracker.num_peers;
row[3] = tracker.msg; row[3] = escapeHtml(tracker.msg);
tTable.insertRow(row); tTable.insertRow(row);
}); });
} }