From 22df5e723f3ddee16768cf7ea3b025e007d93947 Mon Sep 17 00:00:00 2001
From: davrot <davrot@noreply.codeberg.org>
Date: Mon, 27 Jan 2025 19:40:48 +0000
Subject: [PATCH] =?UTF-8?q?Dateien=20nach=20=E2=80=9Eweb=5Fsrc/js/features?=
 =?UTF-8?q?=E2=80=9C=20hochladen?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 web_src/js/features/common-global.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web_src/js/features/common-global.js b/web_src/js/features/common-global.js
index 4ae4ff9a77..a4f8f709c9 100644
--- a/web_src/js/features/common-global.js
+++ b/web_src/js/features/common-global.js
@@ -229,7 +229,7 @@ export function initDropzone(el) {
       this.on('success', (file, data) => {
         file.uuid = data.uuid;
         const $input = $(`<input id="${data.uuid}" name="files" type="hidden">`).val(data.uuid);
-        const $inputPath = $(`<input type="hidden" name="files_fullpath[${data.uuid}]" value="${file.fullPath || file.name}">`);
+        const $inputPath = $(`<input type="hidden" name="files_fullpath[${data.uuid}]" value="${htmlEscape(file.fullPath || file.name)}">`);
         $dropzone.find('.files').append($input).append($inputPath);
         // Create a "Copy Link" element, to conveniently copy the image
         // or file link as Markdown to the clipboard