From f4e2238abe989751b5ddc236fbc3361df9dd960f Mon Sep 17 00:00:00 2001 From: Jamie Cameron Date: Thu, 15 May 2014 21:43:04 -0700 Subject: [PATCH] Use correct escaping funtion for JS --- user_chooser.cgi | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/user_chooser.cgi b/user_chooser.cgi index 8f3c1e3fa..4d01bcdec 100755 --- a/user_chooser.cgi +++ b/user_chooser.cgi @@ -25,7 +25,7 @@ if ($in{'multi'}) { print "selr = new Array($len);\n"; for($i=0; $i<$len; $i++) { print "sel[$i] = \"". - "e_escape($ul[$i], '"')."\";\n"; + quotemeta($ul[$i], '"')."\";\n"; # samba valid system user can start with @ + & $gn = $ul[$i]; @@ -35,7 +35,7 @@ if ($in{'multi'}) { #@uinfo = getpwnam($ul[$i]); if (@uinfo) { print "selr[$i] = \"". - "e_escape($uinfo[6])."\";\n"; + quotemeta($uinfo[6])."\";\n"; } else { print "selr[$i] = \"???\";\n";