Proper escaping of filenames and pathes. tagspaces#25

ecneladis · ecneladis · commit e7bb44ad800a · 2014-02-27T21:02:38.000+01:00
diff --git a/data/js/perspective.manager.js b/data/js/perspective.manager.js
@@ -196,8 +196,8 @@ var updateFileBrowserData = function(dirList) {
             // Considering Unix HiddenEntries (. in the beginning of the filename)
             if (TSCORE.Config.getShowUnixHiddenEntries() || 
                (!TSCORE.Config.getShowUnixHiddenEntries() && (dirList[i].name.indexOf(".") != 0))) {
-                 filename = dirList[i].name.replace(/(<([^>]+)>)/ig,""); // sanitizing filename
-                 path = dirList[i].path.replace(/(<([^>]+)>)/ig,""); // sanitizing filepath
+                 filename = $("<html>").text(dirList[i].name).html();
+                 path = $("<html>").text(dirList[i].path).html();
                  tags = TSCORE.TagUtils.extractTags(path);
                  title = TSCORE.TagUtils.extractTitle(path);
 				 ext = TSCORE.TagUtils.extractFileExtension(path);
