From 6d4ecf1af0a76cf3661b0ca6b0076d758d4a020f Mon Sep 17 00:00:00 2001
From: Olivier Paroz <oparoz@users.noreply.github.com>
Date: Sun, 3 Jul 2016 23:27:04 +0200
Subject: [PATCH] Add more escaping

Escape folder names in share.js
---
 js/vendor/owncloud/share.js | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/js/vendor/owncloud/share.js b/js/vendor/owncloud/share.js
index 6a24b04f9e..252df5a2ab 100644
--- a/js/vendor/owncloud/share.js
+++ b/js/vendor/owncloud/share.js
@@ -144,8 +144,8 @@
 			var data = this._loadShares(path);
 			var dropDownEl;
 			var self = this;
-			var html = '<div id="dropdown" class="drop shareDropDown" data-item-type="' + itemType +
-				'" data-item-source="' + path + '">';
+			var html = '<div id="dropdown" class="drop shareDropDown" data-item-type="' + escapeHTML(itemType) +
+				'" data-item-source="' + escapeHTML(path) + '">';
 			if (data !== false && data[0] && !_.isUndefined(data[0].uid_file_owner) &&
 				data[0].uid_file_owner !== OC.currentUser
 			) {