Escape \ and " characters first, to prevent traceback when sending such an alert from remote.

This commit is contained in:
Mattias Põldaru 2011-12-23 17:23:32 +02:00
parent 7f6edda463
commit e94ab832eb
1 changed files with 6 additions and 2 deletions

View File

@ -208,7 +208,9 @@ window.OpenLP = {
},
showAlert: function (event) {
event.preventDefault();
var text = "{\"request\": {\"text\": \"" + $("#alert-text").val() + "\"}}";
var text = "{\"request\": {\"text\": \"" +
$("#alert-text").val().replace("\\", "\\\\").replace("\"", "\\\"") +
"\"}}";
$.getJSON(
"/api/alert",
{"data": text},
@ -219,7 +221,9 @@ window.OpenLP = {
},
search: function (event) {
event.preventDefault();
var text = "{\"request\": {\"text\": \"" + $("#search-text").val() + "\"}}";
var text = "{\"request\": {\"text\": \"" +
$("#search-text").val().replace("\\", "\\\\").replace("\"", "\\\"") +
"\"}}";
$.getJSON(
"/api/" + $("#search-plugin").val() + "/search",
{"data": text},