Flash filenames from 4plebs are not HTML escaped, but the URLs to access them on 4chan are.

This commit is contained in:
ccd0 2017-01-15 17:21:49 -08:00
parent c0350960d5
commit 571a964080

View File

@ -176,7 +176,7 @@ class Fetcher
name: data.media.media_filename
url: Redirect.to('file', {boardID: @boardID, filename: data.media.media_orig}) or
if @boardID is 'f'
"#{location.protocol}//#{ImageHost.flashHost()}/#{@boardID}/#{encodeURIComponent data.media.media_filename}"
"#{location.protocol}//#{ImageHost.flashHost()}/#{@boardID}/#{encodeURIComponent E data.media.media_filename}"
else
"#{location.protocol}//#{ImageHost.host()}/#{@boardID}/#{data.media.media_orig}"
height: data.media.media_h