Small security fix
This commit is contained in:
parent
d7d53d643e
commit
1602f5dcc2
6
js.js
6
js.js
@ -90,6 +90,8 @@ window.onload = function() {
|
||||
}
|
||||
}
|
||||
|
||||
params_url = encodeURI(params_url);
|
||||
|
||||
if(available || free || station)
|
||||
{
|
||||
if(update == false && (navigator.geolocation || position != '')) //We don't want to update and the navigator as geolocation capabilities or we specified a position
|
||||
@ -459,11 +461,11 @@ window.onload = function() {
|
||||
{
|
||||
if(GET != '' && GET != "position")
|
||||
{
|
||||
input_params += "<input type='hidden' name='"+GET+"' value='"+params[GET]+"'/>";
|
||||
input_params += "<input type='hidden' name='"+escapeHTML(GET)+"' value='"+escapeHTML(params[GET])+"'/>";
|
||||
}
|
||||
}
|
||||
|
||||
document.getElementById("position").innerHTML = '<form action="index.php" method="get"><p><label for="position">Chercher autour de :</label><br/><input typ="text" name="position" id="position"/></p><p><input type="submit" value="Chercher"/></p>'+escapeHTML(input_params)+'</form>';
|
||||
document.getElementById("position").innerHTML = '<form action="index.php" method="get"><p><label for="position">Chercher autour de :</label><br/><input typ="text" name="position" id="position"/></p><p><input type="submit" value="Chercher"/></p>'+input_params+'</form>';
|
||||
}
|
||||
}
|
||||
else //If we didn't choose what to do, display the choices
|
||||
|
Loading…
Reference in New Issue
Block a user