Escape single quotes

11 years ago · f05ac47eb6
1 changed files with 2 additions and 0 deletions
--- a/core/js/oc-dialogs.js
+++ b/core/js/oc-dialogs.js
@ -389,6 +389,8 @@ var OCdialogs = {
 				forceIcon:	0
 			};
 			var previewpath = OC.generateUrl('/core/preview.png?') + $.param(urlSpec);
+			// Escaping single quotes
+			previewpath = previewpath.replace(/'/g, "%27")
 			$originalDiv.find('.icon').css({"background-image":   "url('" + previewpath + "')"});
 			getCroppedPreview(replacement).then(
 				function(path){