From f48247ee7a266d944811e935dbc50af31bff64f0 Mon Sep 17 00:00:00 2001
From: Damyan Mitev <damyan.mitev@vereign.com>
Date: Thu, 30 May 2019 15:21:17 +0300
Subject: [PATCH] encode path, title, contentype and resourceid in
documentCreateDocument and documentPutDocument
---
javascript/src/iframe/viamapi-iframe.js | 7 +++++++
1 file changed, 7 insertions(+)
diff --git a/javascript/src/iframe/viamapi-iframe.js b/javascript/src/iframe/viamapi-iframe.js
index 2db81cf..fbbb138 100644
--- a/javascript/src/iframe/viamapi-iframe.js
+++ b/javascript/src/iframe/viamapi-iframe.js
@@ -1045,6 +1045,10 @@ const connection = Penpal.connectToParent({
return encodeResponse("400", "", "Identity not authenticated");
}
+ path = encodeURI(path);
+ contentType = encodeURI(contentType);
+ title = encodeURI(title);
+
const config = {
headers: {
path,
@@ -1072,6 +1076,9 @@ const connection = Penpal.connectToParent({
return encodeResponse("400", "", "Identity not authenticated");
}
+ resourceid = encodeURI(resourceid);
+ contentType = encodeURI(contentType);
+
const config = {
headers: {
'Content-Type': 'multipart/form-data',
--
GitLab