diff options
| author | AUTOMATIC1111 <16777216c@gmail.com> | 2023-09-30 05:32:38 +0000 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2023-09-30 05:32:38 +0000 |
| commit | 833b9b62b5335000259bfad9145ed1d72cb70a18 (patch) | |
| tree | 7bc099a810b1d94b553ec52dd3da28cd8d1fa4fa /modules/ui_extra_networks.py | |
| parent | 3b0be0f12f44ba5729fa2113145d3d391f73a131 (diff) | |
| parent | d00f6dca2825c2a73bbc1a5c707be276d62acc6b (diff) | |
| download | stable-diffusion-webui-gfx803-833b9b62b5335000259bfad9145ed1d72cb70a18.tar.gz stable-diffusion-webui-gfx803-833b9b62b5335000259bfad9145ed1d72cb70a18.tar.bz2 stable-diffusion-webui-gfx803-833b9b62b5335000259bfad9145ed1d72cb70a18.zip | |
Merge pull request #13395 from AUTOMATIC1111/escape-names
Fix viewing/editing metadata when filename contains an apostrophe
Diffstat (limited to 'modules/ui_extra_networks.py')
| -rw-r--r-- | modules/ui_extra_networks.py | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/modules/ui_extra_networks.py b/modules/ui_extra_networks.py index d2e5a727..3eee371b 100644 --- a/modules/ui_extra_networks.py +++ b/modules/ui_extra_networks.py @@ -213,9 +213,9 @@ class ExtraNetworksPage: metadata_button = ""
metadata = item.get("metadata")
if metadata:
- metadata_button = f"<div class='metadata-button card-button' title='Show internal metadata' onclick='extraNetworksRequestMetadata(event, {quote_js(self.name)}, {quote_js(item['name'])})'></div>"
+ metadata_button = f"<div class='metadata-button card-button' title='Show internal metadata' onclick='extraNetworksRequestMetadata(event, {quote_js(self.name)}, {quote_js(html.escape(item['name']))})'></div>"
- edit_button = f"<div class='edit-button card-button' title='Edit metadata' onclick='extraNetworksEditUserMetadata(event, {quote_js(tabname)}, {quote_js(self.id_page)}, {quote_js(item['name'])})'></div>"
+ edit_button = f"<div class='edit-button card-button' title='Edit metadata' onclick='extraNetworksEditUserMetadata(event, {quote_js(tabname)}, {quote_js(self.id_page)}, {quote_js(html.escape(item['name']))})'></div>"
local_path = ""
filename = item.get("filename", "")
|