[prev in list] [next in list] [prev in thread] [next in thread] 

List:       lon-capa-cvs
Subject:    [LON-CAPA-cvs] cvs: loncom /auth lonauth.pm
From:       raeburn via LON-CAPA-cvs <lon-capa-cvs () mail ! lon-capa ! org>
Date:       2022-05-21 5:16:43
Message-ID: cvsraeburn1653110203 () cvsserver
[Download RAW message or body]

raeburn		Sat May 21 05:16:43 2022 EDT

  Modified files:              
    /loncom/auth	lonauth.pm 
  Log:
  - Bug 6754 LON-CAPA as LTI Provider
    Escape any single quotes in destination URL to avoid javascript errors.
  
  
Index: loncom/auth/lonauth.pm
diff -u loncom/auth/lonauth.pm:1.172 loncom/auth/lonauth.pm:1.173
--- loncom/auth/lonauth.pm:1.172	Sun Feb 27 01:43:13 2022
+++ loncom/auth/lonauth.pm	Sat May 21 05:16:43 2022
@@ -1,7 +1,7 @@
 # The LearningOnline Network
 # User Authentication Module
 #
-# $Id: lonauth.pm,v 1.172 2022/02/27 01:43:13 raeburn Exp $
+# $Id: lonauth.pm,v 1.173 2022/05/21 05:16:43 raeburn Exp $
 #
 # Copyright Michigan State University Board of Trustees
 #
@@ -248,6 +248,7 @@
         if ($env{'request.lti.target'} eq '') {
             my $ltitarget = (($destination =~ /\?/) ? '&' : '?').
                             'ltitarget=iframe';
+            &js_escape(\$destination);
             $js = <<"ENDJS";
 
 <script type="text/javascript">


_______________________________________________
LON-CAPA-cvs mailing list
LON-CAPA-cvs@mail.lon-capa.org
http://mail.lon-capa.org/mailman/listinfo/lon-capa-cvs
[prev in list] [next in list] [prev in thread] [next in thread]