Escape \ and " characters first, to prevent traceback when sending such an alert from remote.

This commit is contained in:
Mattias Põldaru 2011-12-23 17:23:32 +02:00
parent 7f6edda463
commit e94ab832eb
1 changed files with 6 additions and 2 deletions

View File

@ -208,7 +208,9 @@ window.OpenLP = {
}, },
showAlert: function (event) { showAlert: function (event) {
event.preventDefault(); event.preventDefault();
var text = "{\"request\": {\"text\": \"" + $("#alert-text").val() + "\"}}"; var text = "{\"request\": {\"text\": \"" +
$("#alert-text").val().replace("\\", "\\\\").replace("\"", "\\\"") +
"\"}}";
$.getJSON( $.getJSON(
"/api/alert", "/api/alert",
{"data": text}, {"data": text},
@ -219,7 +221,9 @@ window.OpenLP = {
}, },
search: function (event) { search: function (event) {
event.preventDefault(); event.preventDefault();
var text = "{\"request\": {\"text\": \"" + $("#search-text").val() + "\"}}"; var text = "{\"request\": {\"text\": \"" +
$("#search-text").val().replace("\\", "\\\\").replace("\"", "\\\"") +
"\"}}";
$.getJSON( $.getJSON(
"/api/" + $("#search-plugin").val() + "/search", "/api/" + $("#search-plugin").val() + "/search",
{"data": text}, {"data": text},