fix: escap filename with special chracters fix #139

boypt · Sep 18, 2021 · d1dd295 · d1dd295
1 parent 17d2c99
commit d1dd295
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 3 deletions.
diff --git a/static/files/js/utils.js b/static/files/js/utils.js
@@ -198,6 +198,9 @@ app.filter("round", function () {
   };
 });
 
+app.filter("escape", function () {
+  return window.encodeURIComponent;
+});
 
 app.filter("ratioRound", function () {
   return function (n) {

diff --git a/static/files/template/download-tree.html b/static/files/template/download-tree.html
@@ -7,7 +7,7 @@
 
 <div class="content">
   <div class="header">
-    <a ng-if="!isdownloading(node.Name)" ng-href="download/{{ node.$path }}">{{ node.Name }}</a>
+    <a ng-if="!isdownloading(node.Name)" ng-href="download/{{ node.$path | escape }}">{{ node.Name }}</a>
     <span ng-if="isfile() && isdownloading(node.Name)">{{ node.Name }}</span>
     <span ng-if="!isdownloading(node.Name)" class="controls">
       <i ng-show="!confirm" ng-click="preremove()" class="red trash icon"></i>
@@ -22,9 +22,9 @@
     <audio ng-if="audioPreview" controls>
       <source ng-src="{{ showPreview ? ('download/'+node.$path) : '' }}">
     </audio>
-    <img ng-if="imagePreview" ng-src="{{ showPreview ? ('download/'+node.$path) : '' }}">
+    <img ng-if="imagePreview" ng-src="{{ showPreview ? ('download/'+(node.$path | escape)) : '' }}">
     <video controls autoplay ng-if="videoPreview">
-      <source ng-src="{{ showPreview ? ('download/'+node.$path) : '' }}">
+      <source ng-src="{{ showPreview ? ('download/'+(node.$path|escape)) : '' }}">
     </video>
   </div>
   <div class="list" ng-if="isdir() && !closed()">