From e393f82eb732b36094d524d6a0e2e508762d636f Mon Sep 17 00:00:00 2001 From: zzz <zzz@mail.i2p> Date: Tue, 13 May 2014 21:35:12 +0000 Subject: [PATCH] * i2psnark: Escaping fixes on details page --- .../i2psnark/java/src/org/klomp/snark/web/I2PSnarkServlet.java | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/apps/i2psnark/java/src/org/klomp/snark/web/I2PSnarkServlet.java b/apps/i2psnark/java/src/org/klomp/snark/web/I2PSnarkServlet.java index 0b4c0663e3..1de7b7dc35 100644 --- a/apps/i2psnark/java/src/org/klomp/snark/web/I2PSnarkServlet.java +++ b/apps/i2psnark/java/src/org/klomp/snark/web/I2PSnarkServlet.java @@ -2509,6 +2509,7 @@ public class I2PSnarkServlet extends BasicServlet { String path=addPaths(base,encoded); if (item.isDirectory() && !path.endsWith("/")) path=addPaths(path,"/"); + path = urlEncode(path); String icon = toIcon(item); buf.append("<TD class=\"snarkFileIcon\">"); @@ -2529,7 +2530,7 @@ public class I2PSnarkServlet extends BasicServlet { buf.append("</TD><TD class=\"snarkFileName\">"); if (complete) buf.append("<a href=\"").append(path).append("\">"); - buf.append(item.getName()); + buf.append(item.getName().replace("&", "&")); if (complete) buf.append("</a>"); buf.append("</TD><TD ALIGN=right class=\"snarkFileSize\">"); -- GitLab