Tickets :: Comment on [#3824] Filenames containing a ' produce javascript errors

* Your Email Address
* Spam protection	Enter the letters below: .__.\ /. ..__ .___ \| \| >< \|__\|[__)[__ \|__\|/ \\| \|[__)\|
Comment	> When browsing a directory containing a file with a ' in it, in IE it > gives javascript errors. > > > > I believe the bug stems from: > > gollem/manager.php line 400: > > > > $item['link'] = Horde::link('#', '', '', '', "view('$url', '" . > $val['name'] . "'); return false;") . $name . '</a>'; > > > > where it is passing $val['name'] .. I have tried wrapping this in > addslashes() and htmlspecialchars(,ENT_QUOTES) however neither one > of them fixes the errors, however there are no longer any 's in the > string.. > > > > The _EXACT_ error in IE is: > > > > Error: Expected ')' > > > > the line it presents is never near one of the lines that has a > filename with a single quote (possibly javascript document.write > somewhere) > > > > investigating further...
Attachment
Watch this ticket