rnhmjoj/qutebrowser
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Do proper javascript escaping in password_fill

Browse Source
This commit is contained in:
Thorsten Wißmann 2015-12-11 17:04:50 +01:00
parent 9592eb0c69
commit 26f2ae5ad0
1 changed files with 8 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
misc/userscripts/password_fill
View File

@ -60,6 +60,12 @@ die() {
exit 0 exit 0
} }
javascript_escape() {
# print the first argument in a escaped way, such that it can savely
# be used within javascripts double quotes
sed "s,[\\\'\"],\\\&,g" <<< "$1"
}
# ======================================================= # # ======================================================= #
# CONFIGURATION # CONFIGURATION
# ======================================================= # # ======================================================= #
@ -313,10 +319,10 @@ cat <<EOF
for (var j = 0; j < inputs.length; j++) { for (var j = 0; j < inputs.length; j++) {
var input = inputs[j]; var input = inputs[j];
if (input.type == "text" || input.type == "email") { if (input.type == "text" || input.type == "email") {
input.value = "$username"; input.value = "$(javascript_escape "${username}")";
} }
if (input.type == "password") { if (input.type == "password") {
input.value = "${password//\"/\\\"}"; input.value = "$(javascript_escape "${password}")";
} }
} }
}; };