mirror of
https://git.tt-rss.org/git/tt-rss.git
synced 2025-12-15 12:05:57 +00:00
getArticleLink: add escaping; open_article_in_new_window: add error notifications (closes #202)
This commit is contained in:
@@ -68,10 +68,15 @@ function open_article_callback(transport) {
|
||||
try {
|
||||
|
||||
if (transport.responseXML) {
|
||||
|
||||
var link = transport.responseXML.getElementsByTagName("link")[0];
|
||||
var id = transport.responseXML.getElementsByTagName("id")[0];
|
||||
|
||||
debug("open_article_callback, received link: " + link);
|
||||
|
||||
if (link) {
|
||||
debug("link url: " + link.firstChild.nodeValue);
|
||||
|
||||
window.open(link.firstChild.nodeValue, "_blank");
|
||||
|
||||
if (id) {
|
||||
@@ -80,7 +85,11 @@ function open_article_callback(transport) {
|
||||
window.setTimeout("toggleUnread(" + id + ", 0)", 100);
|
||||
}
|
||||
}
|
||||
} else {
|
||||
notify_error("Can't open article: received invalid article link");
|
||||
}
|
||||
} else {
|
||||
notify_error("Can't open article: received invalid XML");
|
||||
}
|
||||
|
||||
} catch (e) {
|
||||
|
||||
@@ -279,7 +279,7 @@
|
||||
WHERE id = '$id' AND id = ref_id AND owner_uid = '".$_SESSION['uid']."'");
|
||||
|
||||
if (db_num_rows($result) == 1) {
|
||||
$link = strip_tags(db_fetch_result($result, 0, "link"));
|
||||
$link = htmlspecialchars(strip_tags(db_fetch_result($result, 0, "link")));
|
||||
print "<rpc-reply><link>$link</link><id>$id</id></rpc-reply>";
|
||||
} else {
|
||||
print "<rpc-reply><error>Article not found</error></rpc-reply>";
|
||||
|
||||
Reference in New Issue
Block a user