From 9d509751415672b8123c0c4ed177ec28ce343681 Mon Sep 17 00:00:00 2001 From: Fiat2LTC <wichall@awayfromkeyboard.co.uk> Date: Tue, 15 May 2018 17:28:18 +0100 Subject: [PATCH] Unescape HTML in paths in WebFileBrowser --- sickbeard/webserve.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/sickbeard/webserve.py b/sickbeard/webserve.py index 79d16a45f..89a72c3a3 100644 --- a/sickbeard/webserve.py +++ b/sickbeard/webserve.py @@ -668,13 +668,13 @@ class WebFileBrowser(WebRoot): self.set_header(b'Cache-Control', 'max-age=0,no-cache,no-store') self.set_header(b'Content-Type', 'application/json') - return json.dumps(foldersAtPath(path, True, bool(int(includeFiles)), fileTypes.split(','))) + return json.dumps(foldersAtPath(xhtml_unescape(path), True, bool(int(includeFiles)), fileTypes.split(','))) def complete(self, term, includeFiles=False, fileTypes=''): self.set_header(b'Cache-Control', 'max-age=0,no-cache,no-store') self.set_header(b'Content-Type', 'application/json') - paths = [entry['path'] for entry in foldersAtPath(ek(os.path.dirname, term), includeFiles=bool(int(includeFiles)), + paths = [entry['path'] for entry in foldersAtPath(ek(os.path.dirname, xhtml_unescape(term)), includeFiles=bool(int(includeFiles)), fileTypes=fileTypes.split(',')) if 'path' in entry] -- GitLab