[BUGFIX] Fix mime_type escaping

Signed-off-by: Jerome Jutteau <mojo@couak.net>

diff --git a/lib/functions.php b/lib/functions.php
index b417769a5beb9d5b1634f6dccbcbadca123117c9..3a50eac828cc42fa58cb46e6c53d910371dbd3eb 100644 (file)
--- a/lib/functions.php
+++ b/lib/functions.php
@@ -612,7 +612,7 @@ function jirafeau_admin_list($name, $file_hash, $link_hash)
                 '<strong><a id="upload_link" href="f.php?h='. jirafeau_escape($node) .'" title="' .
                     t('DL_PAGE') . '">' . jirafeau_escape($l['file_name']) . '</a></strong>';
                 echo '</td>';
                 '<strong><a id="upload_link" href="f.php?h='. jirafeau_escape($node) .'" title="' .
                     t('DL_PAGE') . '">' . jirafeau_escape($l['file_name']) . '</a></strong>';
                 echo '</td>';

-                echo '<td>' . $l['mime_type'] . '</td>';
+                echo '<td>' . jirafeau_escape($l['mime_type']) . '</td>';

                 echo '<td>' . jirafeau_human_size($l['file_size']) . '</td>';
                 echo '<td>' . ($l['time'] == -1 ? '∞' : jirafeau_get_datetimefield($l['time'])) . '</td>';
                 echo '<td>';
                 echo '<td>' . jirafeau_human_size($l['file_size']) . '</td>';
                 echo '<td>' . ($l['time'] == -1 ? '∞' : jirafeau_get_datetimefield($l['time'])) . '</td>';
                 echo '<td>';