Commit a63421ab authored by ufku's avatar ufku
Browse files

- #1939208: Escape special characters in filenames before appending them as ajax string data

parent 6a42f20f

js/imce.js

+1 −1
Original line number Diff line number Diff line
@@ -485,7 +485,7 @@ commonSubmit: function(fop) { 


//settings for default file operations

fopSettings: function (fop) {

  return {url: imce.ajaxURL(fop), type: 'POST', dataType: 'json', success: imce.processResponse, complete: function (response) {imce.fopLoading(fop, false);}, data: imce.vars.opform +'&filenames='+ imce.serialNames() +'&jsop='+ fop + (imce.ops[fop].div ? '&'+ $('input, select, textarea', imce.ops[fop].div).serialize() : '')};

  return {url: imce.ajaxURL(fop), type: 'POST', dataType: 'json', success: imce.processResponse, complete: function (response) {imce.fopLoading(fop, false);}, data: imce.vars.opform +'&filenames='+ escape(imce.serialNames()) +'&jsop='+ fop + (imce.ops[fop].div ? '&'+ $('input, select, textarea', imce.ops[fop].div).serialize() : '')};

},



//toggle loading state