gunnar: server/patches/horde/3.2-rc3/horde kolab_issue2831.patch, NONE, 1.1

[cvs at kolab.org]

Author: gunnar

Update of /kolabrepository/server/patches/horde/3.2-rc3/horde
In directory doto:/tmp/cvs-serv27448/horde

Added Files:
	kolab_issue2831.patch 
Log Message:
Patch for kolab/issue2831

--- NEW FILE: kolab_issue2831.patch ---
diff -p --unified=3 -r1.18 -r1.19
--- horde/services/obrowser/index.php	2008/01/02 11:13:57	1.18
+++ horde/services/obrowser/index.php	2008/06/13 21:43:29	1.19
@@ -1,6 +1,6 @@
 <?php
 /**
- * $Horde: horde/services/obrowser/index.php,v 1.17 2007/02/28 20:26:40 chuck Exp $
+ * $Horde: horde/services/obrowser/index.php,v 1.18 2008/01/02 11:13:57 jan Exp $
  *
  * Copyright 2004-2008 The Horde Project (http://www.horde.org/)
  *
@@ -92,10 +92,10 @@ foreach ($list as $path => $values) {
     if (!empty($values['browseable'])) {
         $url = Horde::url($registry->get('webroot', 'horde') . '/services/obrowser/');
         $url = Util::addParameter($url, 'path', $path);
-        $row['name'] = Horde::link($url) . $values['name'] . '</a>';
+        $row['name'] = Horde::link($url) . htmlspecialchars($values['name']) . '</a>';
     } else {
         $js = "return chooseObject('" . addslashes($path) . "');";
-        $row['name'] = Horde::link('#', sprintf(_("Choose %s"), $values['name']), '', '', $js) . $values['name'] . '</a>';
+        $row['name'] = Horde::link('#', sprintf(_("Choose %s"), $values['name']), '', '', $js) . htmlspecialchars($values['name']) . '</a>';
     }

     $rows[] = $row;