escape fileName

Change-Id: I747833a7144b0ae86624626d89a7c4d634034b7a
This commit is contained in:
mpl 2011-07-04 22:23:14 +02:00
parent db3ea3a4d6
commit 3a60067733
1 changed files with 2 additions and 2 deletions

View File

@ -423,8 +423,8 @@ function _camliBlobTitleOrThumb(pn, des, w, h) {
if (d.camliType == "file" && d.file && d.file.fileName) {
var fileName = d.file.fileName
if (w != 0 && h != 0 && d.file.mimeType && d.file.mimeType.indexOf("image/") == 0) {
var img = "<img src='./thumbnail/" + pn + "/" + fileName +
"?mw=" + w + "&mh=" + h + "'>";
var img = "<img src='./thumbnail/" + pn + "/" +
fileName.replace(/['"<>\?&]/g, "") + "?mw=" + w + "&mh=" + h + "'>";
return img;
}
return fileName;