rnhmjoj/qutebrowser
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Do proper javascript escaping in password_fill

Browse Source
This commit is contained in:
Thorsten Wißmann 2015-12-11 17:04:50 +01:00
parent 9592eb0c69
commit 26f2ae5ad0
1 changed files with 8 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
misc/userscripts/password_fill
View File

@ -60,6 +60,12 @@ die() {
exit 0
}
javascript_escape() {
# print the first argument in a escaped way, such that it can savely
# be used within javascripts double quotes
sed "s,[\\\'\"],\\\&,g" <<< "$1"
}
# ======================================================= #
# CONFIGURATION
# ======================================================= #
@ -313,10 +319,10 @@ cat <<EOF
for (var j = 0; j < inputs.length; j++) {
var input = inputs[j];
if (input.type == "text" || input.type == "email") {
input.value = "$username";
input.value = "$(javascript_escape "${username}")";
}
if (input.type == "password") {
input.value = "${password//\"/\\\"}";
input.value = "$(javascript_escape "${password}")";
}
}
};