Fix #1634.
This commit is contained in:
parent
3fa2846011
commit
b8debe756a
@ -1,3 +1,5 @@
|
|||||||
|
- [Security fix](https://github.com/MayhemYDG/4chan-x/issues/1634).
|
||||||
|
|
||||||
### 3.20.12 - *2014-05-03*
|
### 3.20.12 - *2014-05-03*
|
||||||
|
|
||||||
- Fix quoting.
|
- Fix quoting.
|
||||||
|
|||||||
@ -47,7 +47,7 @@ Build =
|
|||||||
name: data.filename + data.ext
|
name: data.filename + data.ext
|
||||||
timestamp: "#{data.tim}#{data.ext}"
|
timestamp: "#{data.tim}#{data.ext}"
|
||||||
url: if boardID is 'f'
|
url: if boardID is 'f'
|
||||||
"//i.4cdn.org/#{boardID}/#{data.filename}#{data.ext}"
|
"//i.4cdn.org/#{boardID}/#{escape data.filename}#{data.ext}"
|
||||||
else
|
else
|
||||||
"//i.4cdn.org/#{boardID}/#{data.tim}#{data.ext}"
|
"//i.4cdn.org/#{boardID}/#{data.tim}#{data.ext}"
|
||||||
height: data.h
|
height: data.h
|
||||||
@ -271,7 +271,7 @@ Build =
|
|||||||
pageCount = Index.liveThreadIDs.indexOf(thread.ID) // Index.threadsNumPerPage + 1
|
pageCount = Index.liveThreadIDs.indexOf(thread.ID) // Index.threadsNumPerPage + 1
|
||||||
|
|
||||||
subject = if thread.OP.info.subject
|
subject = if thread.OP.info.subject
|
||||||
"<div class='subject'>#{thread.OP.info.subject}</div>"
|
"<div class='subject'>#{thread.OP.nodes.subject.innerHTML}</div>"
|
||||||
else
|
else
|
||||||
''
|
''
|
||||||
comment = thread.OP.nodes.comment.innerHTML.replace /(<br>\s*){2,}/g, '<br>'
|
comment = thread.OP.nodes.comment.innerHTML.replace /(<br>\s*){2,}/g, '<br>'
|
||||||
|
|||||||
Loading…
x
Reference in New Issue
Block a user