Goyslop/4chan-x
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Escape parameters in javascript: sauce links.

Browse Source
This commit is contained in:
ccd0 2014-10-13 00:20:59 -07:00
parent 3317f6250f
commit fd5097af3d
1 changed files with 5 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
src/Images/Sauce.coffee
View File

@ -29,21 +29,22 @@ Sauce =
'%TURL': post.file.thumbURL '%TURL': post.file.thumbURL
'%URL': post.file.URL '%URL': post.file.URL
'%MD5': post.file.MD5 '%MD5': post.file.MD5
'%board': post.board '%board': post.board.ID
'%name': post.file.name '%name': post.file.name
'%%': '%' '%%': '%'
'%semi': ';' '%semi': ';'
}[parameter] }[parameter]
if key is 'url' and parameter isnt '%%' and parameter isnt '%semi' if key is 'url' and parameter isnt '%%' and parameter isnt '%semi'
encodeURIComponent type type = JSON.stringify type if /^javascript:/i.test parts['url']
else type = encodeURIComponent type
type type
ext = post.file.URL.match(/\.([^\.]*)$/)?[1] or '' ext = post.file.URL.match(/\.([^\.]*)$/)?[1] or ''
return null unless !parts['boards'] or post.board.ID in parts['boards'].split ',' return null unless !parts['boards'] or post.board.ID in parts['boards'].split ','
return null unless !parts['types'] or ext in parts['types'].split ',' return null unless !parts['types'] or ext in parts['types'].split ','
a = Sauce.link.cloneNode true a = Sauce.link.cloneNode true
a.href = parts['url'] a.href = parts['url']
a.textContent = parts['text'] a.textContent = parts['text']
a.removeAttribute 'target' if /^javascript:/i.test parts['url']
a a
node: -> node: ->
return if @isClone or !@file return if @isClone or !@file