Skip to content

[Notifications] Escape HTML in destUrl and fileName

Kai Uwe Broulik requested to merge work/kbroulik/noti-escape-html-521 into Plasma/5.21

Ensures that a file or destination named

foo.txt doesn't break the layout.

It still goes through the normal HTML text filter, so remote file access isn't possible, merely screwing up the layout.

(5.21 version of !628 (merged))

Merge request reports